PT-2007-6834 · Php+1 · Php+1

Published 2007-11-20 · Updated 2018-10-15 · CVE-2007-5898

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.2.5

Description The issue concerns the htmlentities and htmlspecialchars functions in PHP, which accept partial multibyte sequences. This has an unknown impact and attack vectors.

Recommendations For versions prior to 5.2.5, update to version 5.2.5 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-5898

DSA-1444-1

HPSBUX02332

RHSA-2008:0505

RHSA-2008:0544

RHSA-2008:0545

RHSA-2008:0546

RHSA-2008:0582

RHSA-2008_0544

RHSA-2008_0545

Affected Products

Php

Red Hat

References · 57

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2872 · Security Note
• http://securityfocus.com/archive/1/491693/100/0/threaded · Vendor Advisory
• http://secunia.com/advisories/27648 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4887 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4840 · Security Note
• https://usn.ubuntu.com/549-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5898 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5898 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2008:127 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4783 · Security Note
• http://redhat.com/support/errata/RHSA-2008-0544.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:126 · Vendor Advisory
• http://ubuntu.com/usn/usn-549-2 · Vendor Advisory
• http://debian.org/security/2008/dsa-1444 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:125 · Vendor Advisory