NVD

Id
5306  
Name
CVE-2008-5557  
Description
Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-23  
Modified Date
2011-03-07  
Seq
2008-5557  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
33443 5306 CVE-2008-5557 20081221 CVE-2008-5557 - PHP mbstring buffer overflow  View
33444 5306 CVE-2008-5557 http://bugs.php.net/bug.php?id=45722  View
33445 5306 CVE-2008-5557 http://cvs.php.net/viewvc.cgi/php-src/ext/mbstring/libmbfl/filters/mbfilter_htmlent.c?r1=1.7&r2=1.8  View
33446 5306 CVE-2008-5557 SSRT100079  View
33447 5306 CVE-2008-5557 APPLE-SA-2009-05-12  View
33448 5306 CVE-2008-5557 SUSE-SR:2009:004  View
33449 5306 CVE-2008-5557 SUSE-SR:2009:008  View
33450 5306 CVE-2008-5557 HPSBUX02431  View
33451 5306 CVE-2008-5557 HPSBUX02465  View
33452 5306 CVE-2008-5557 oval:org.mitre.oval:def:10286  View
33453 5306 CVE-2008-5557 1021482  View
33454 5306 CVE-2008-5557 http://support.apple.com/kb/HT3549  View
33455 5306 CVE-2008-5557 http://wiki.rpath.com/Advisories:rPSA-2009-0035  View
33456 5306 CVE-2008-5557 DSA-1789  View
33457 5306 CVE-2008-5557 MDVSA-2009:045  View
33458 5306 CVE-2008-5557 http://www.php.net/ChangeLog-5.php#5.2.7  View
33459 5306 CVE-2008-5557 RHSA-2009:0350  View
33460 5306 CVE-2008-5557 20090302 rPSA-2009-0035-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl  View
33461 5306 CVE-2008-5557 32948  View
33462 5306 CVE-2008-5557 TA09-133A  View
33463 5306 CVE-2008-5557 ADV-2009-1297  View
33464 5306 CVE-2008-5557 php-multibyte-bo(47525)  View
33465 5306 CVE-2008-5557 FEDORA-2009-3768  View
33466 5306 CVE-2008-5557 FEDORA-2009-3848  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46950 JVNDB-2008-002260 PHP の ext/mbstring/libmbfl/filters/mbfilter_htmlent.c における任意のコードを実行される脆弱性 PHP の mbstring 拡張に含まれる ext/mbstring/libmbfl/filters/mbfilter_htmlent.c には、文字列の処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-5557 35670 CVE-2008-5557 5306 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002260.html 2008-12-23 2009-11-16 View