CVE-2007-5898

Published: 20 November 2007

The (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465.

Status

References

• http://cvs.php.net/viewvc.cgi/php-src/ext/standard/html.c?r1=1.111.2.2.2.14&r2=1.111.2.2.2.14.2.1
• https://ubuntu.com/security/notices/USN-549-1
• https://ubuntu.com/security/notices/USN-628-1
• https://www.cve.org/CVERecord?id=CVE-2007-5898
• NVD
• Launchpad
• Debian

Bugs

• https://bugs.launchpad.net/ubuntu/+source/php5/+bug/228095