Description

Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from a FILTER_SANITIZE_FULL_SPECIAL_CHARS filter_var call. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-5094.

Remediation

References

CVE-2016-5095

Related Vulnerabilities

Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12386)

Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-1849)

PHP Improper Input Validation Vulnerability (CVE-2015-5589)

WordPress Plugin SearchWP Live Ajax Search Directory Traversal (1.6.2)

Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7874)

Severity

High

Classification

CVE-2016-5095 CWE-190 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Tags

Missing Update Known Vulnerabilities