CVE-2006-1490

PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_entity_decode function and sends the encoded results back to the client, aka a "binary safety" issue. NOTE: this issue has been referred to as a "memory leak," but it is an information leak that discloses memory contents.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

20.51% chance of exploitation in the next 30 days, 97th percentile

Published

2006-03-29

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27508

References

• CVE Record
• NVD entry

Related

• CVE-2006-1489
• CVE-2006-1491
• CVE-2006-1487
• CVE-2006-1494
• CVE-2006-1486
• CVE-2006-1495