Buffer overflow in Php

CVE-2006-4482

Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when used on a 64-bit system, have unspecified impact and attack vectors, a different vulnerability than CVE-2006-1990.

Vulnerability class: Buffer Overflow

EPSS: 0.045 (90.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_OVAL, signature, Third Party Advisory, vdb-entry)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Release Notes, Vendor Advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Broken Link)
  • cve@mitre.org (x_refsource_SECUNIA, Not Applicable, Vendor Advisory, third-party-advisory)
  • cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
  • cve@mitre.org (x_refsource_SECUNIA, Not Applicable, third-party-advisory)
  • cve@mitre.org (x_refsource_UBUNTU, vendor-advisory, Third Party Advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)
  • cve@mitre.org (x_refsource_SECUNIA, Not Applicable, third-party-advisory)