CVE-2007-5898

Publication date 20 November 2007

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

The (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465.

Status

Package Ubuntu Release Status
php5 8.04 LTS hardy
Fixed 5.2.4-2ubuntu5.3
7.10 gutsy
Fixed 5.2.3-1ubuntu6.1
7.04 feisty
Fixed 5.2.1-0ubuntu1.5
6.10 edgy
Fixed 5.1.6-1ubuntu2.7
6.06 LTS dapper
Fixed 5.1.2-1ubuntu3.10

References

Related Ubuntu Security Notices (USN)

    • USN-549-1
    • PHP vulnerabilities
    • 29 November 2007

Other references