PT-2007-6834 · Php+1 · Php+1

Publicado 2007-11-20 · Atualizado 2018-10-15 · CVE-2007-5898

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.2.5

Description The issue concerns the htmlentities and htmlspecialchars functions in PHP, which accept partial multibyte sequences. This has an unknown impact and attack vectors.

Recommendations For versions prior to 5.2.5, update to version 5.2.5 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-5898

DSA-1444-1

HPSBUX02332

RHSA-2008:0505

RHSA-2008:0544

RHSA-2008:0545

RHSA-2008:0546

RHSA-2008:0582

RHSA-2008_0544

RHSA-2008_0545

Produtos afetados

Php

Red Hat

Referências · 57

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2872 · Nota de Segurança
• https://launchpad.net/bugs/173043 · Nota
• https://access.redhat.com/security/cve/CVE-2008-2108 · Nota
• http://php.net/releases/5_2_5.php · Nota
• http://php.net/ChangeLog-5.php#5.2.5 · Nota
• http://securityfocus.com/archive/1/491693/100/0/threaded · Aviso do Fabricante
• http://secunia.com/advisories/27648 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4887 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5898 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4840 · Nota de Segurança
• https://usn.ubuntu.com/549-1 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2007-4782 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5898 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5898 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDVSA-2008:127 · Aviso do Fabricante