| Package | Affected versions | Patched versions |
|---|---|---|
| php | = 5.2.0= 5.2.1= 5.2.10= 5.2.11= 5.2.12= 5.2.13= 5.2.2= 5.2.3= 5.2.4= 5.2.5= 5.2.6= 5.2.7= 5.2.8= 5.2.9= 5.3.0= 5.3.1= 5.3.2 |
The (1) htmlentities, (2) htmlspecialchars, (3) str_getcsv, (4) http_build_query, (5) strpbrk, and (6) strtr functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free