CVE-2006-5465: Buffer Overflow
Published Nov 4, 2006
·Updated
Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.
Affected Software
16 affected components
PHP PHP=5.1.5
PHP PHP=5.1.2
PHP PHP=5.1.1
PHP PHP=5.0-rc1
PHP PHP=5.0.5
PHP PHP=5.0.1
PHP PHP=5.1.4
PHP PHP=5.0.4
PHP PHP<=5.1.6
PHP PHP=5.0-rc3
PHP PHP=5.0.3
PHP PHP=5.1.0
PHP PHP=5.0-rc2
PHP PHP=5.1.3
PHP PHP=5.0.2
PHP PHP=5.0.0
Event History
Nov 4, 2006
CVE Published
12:07 AM
Data Sourced
via NVD·12:07 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-5465?
CVE-2006-5465 has a critical severity level as it may allow remote attackers to execute arbitrary code.
2
How do I fix CVE-2006-5465?
To fix CVE-2006-5465, upgrade to PHP version 5.2.0 or later.
3
Which versions of PHP are affected by CVE-2006-5465?
CVE-2006-5465 affects PHP versions prior to 5.2.0, including 5.1.x and 5.0.x.
4
What types of attacks can exploit CVE-2006-5465?
CVE-2006-5465 can be exploited through crafted UTF-8 inputs targeting the htmlentities or htmlspecialchars functions.
5
What should I do if I cannot upgrade PHP to fix CVE-2006-5465?
If upgrading is not possible, consider applying security patches or implementing input validation to mitigate the risk of CVE-2006-5465.