Unscored DSA-2001-1 2 CVEs

php5 - multiple vulnerabilities

Published Feb 19, 2010 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 5.0	php5	5.2.6.dfsg.1-1+lenny6

Vulnerabilities 2

Unscored —

CVE-2009-4142 Public exploit

The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid S…

Dec 21, 2009
Unscored —

CVE-2009-4143

PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to (1)…

Dec 21, 2009