CVE

Id
91913  
CVE No.
CVE-2016-5094  
Status
Candidate  
Description
Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from the htmlspecialchars function.  
Phase
Assigned (20160526)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
787727 91913 CVE-2016-5094 MLIST:[oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues  View
787728 91913 CVE-2016-5094 URL:http://www.openwall.com/lists/oss-security/2016/05/26/3  View
787729 91913 CVE-2016-5094 CONFIRM:http://php.net/ChangeLog-5.php  View
787730 91913 CVE-2016-5094 CONFIRM:https://bugs.php.net/bug.php?id=72135  View
787731 91913 CVE-2016-5094 CONFIRM:https://github.com/php/php-src/commit/0da8b8b801f9276359262f1ef8274c7812d3dfda?w=1  View
787732 91913 CVE-2016-5094 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731  View
787733 91913 CVE-2016-5094 DEBIAN:DSA-3602  View
787734 91913 CVE-2016-5094 URL:http://www.debian.org/security/2016/dsa-3602  View
787735 91913 CVE-2016-5094 BID:90857  View

Related JVN