Description
Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | php4 | 4:4.3.10-18 | DSA-1206-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | php +13 | 4.3.9-3.22 | RHSA-2006:0730 |
| RHEL 3 | php +6 | 4.3.2-37.ent | RHSA-2006:0730 |
| RHEL 2 | php +7 | 4.1.2-2.13 | RHSA-2006:0730 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Application Stack 1 | php +16 | 5.1.4-1.el4s1.5 | RHSA-2006:0731 |
Advisories 3
- RHSA-2006:0730 Red Hat Security Advisory: php security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2006:0731 Red Hat Security Advisory: php security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-1206-1 php4 Debian Security (DSA / DLA) · Mar 9, 2026
References
- 22881 third-party-advisory
- 1017152 vdb-entry
- ADV-2006-4750 vdb-entry
- ADV-2006-4749 vdb-entry
- 20061102 Advisory 13/2006: PHP HTML Entity Encoder Heap Overflow Vulnerability mailing-list
- RHSA-2006:0731 vendor-advisory
- 22759 third-party-advisory
- 24606 third-party-advisory
- ADV-2007-1546 vdb-entry
- http://docs.info.apple.com/article.html?artnum=304829
- TLSA-2006-38 vendor-advisory
- DSA-1206 vendor-advisory
- 22693 third-party-advisory
- 23247 third-party-advisory
- 22653 third-party-advisory
- 22688 third-party-advisory
- 2006-0061 vendor-advisory
- 20061129 SYM06-023, Symantec NetBackup PureDisk: PHP update to Address Reported Security Vulnerability mailing-list
- GLSA-200703-21 vendor-advisory
- 20061109 rPSA-2006-0205-1 php php-mysql php-pgsql mailing-list
- 22713 third-party-advisory
- 22685 third-party-advisory
- ADV-2006-4317 vdb-entry
- http://www.hardened-php.net/advisory_132006.138.html
- 20070425 PHP HTML Entity Encoder Heap Overflow Vulnerability in Multiple Web-Based Management Interfaces vendor-advisory
- http://issues.rpath.com/browse/RPL-761
- SUSE-SA:2006:067 vendor-advisory
- php-htmlentities-bo(29971) vdb-entry
- 23155 third-party-advisory
- MDKSA-2006:196 vendor-advisory
- 25047 third-party-advisory
- 1017296 vdb-entry
- 22779 third-party-advisory
- RHSA-2006:0730 vendor-advisory
- 20879 vdb-entry
- USN-375-1 vendor-advisory
- APPLE-SA-2006-11-28 vendor-advisory
- 20070425 Cisco Applied Intelligence Response: Identifying and Mitigating Exploitation of the PHP HTML Entity Encoder Heap Overflow Vulnerability in Multiple Web-Based Management Interfaces vendor-advisory
- TA06-333A third-party-advisory
- OpenPKG-SA-2006.028 vendor-advisory
- 22929 third-party-advisory
- 22753 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-245.htm
- oval:org.mitre.oval:def:10240 vdb-entry signature
- 23139 third-party-advisory
- RHSA-2006:0736 vendor-advisory
- http://www.php.net/releases/5_2_0.php