Description

Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when used on a 64-bit system, have unspecified impact and attack vectors, a different vulnerability than CVE-2006-1990.

Remediation

References

CVE-2006-4482

Related Vulnerabilities

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29051)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-1432)

WordPress Plugin Custom Sidebars-Dynamic Widget Area Manager Cross-Site Scripting (2.1.0.1)

WordPress Plugin Subscriptions & Memberships for PayPal Unspecified Vulnerability (1.1.5)

WordPress Plugin WooCommerce PDF Invoice Bulk Download Cross-Site Scripting (1.0.0)

Severity

Critical

Classification

CVE-2006-4482 CWE-119

Tags

Missing Update Known Vulnerabilities