Every CVE Search/ Get API key

CVE-2008-5557

Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring...

10.0 HighFix available

Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.

Exploit likelihood

7.37%Up 2.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.

Record
CVE-2008-5557
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.

Record
CVE-2008-5557
Updated
2026-11-02
EUVDEUVD-2008-5532 No score

Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.

Record
EUVD-2008-5532
Updated
2026-11-03
GitHub AdvisoriesGHSA-frch-4gjp-rjjv No score

Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring...

Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.

Record
GHSA-frch-4gjp-rjjv
Weakness
CWE-119
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php5
Debian:4.0
 before 5.2.0+dfsg-8+etch15, plus listed versions
5.2.0-105.2.0-10+lenny15.2.0-115.2.0-8+etch15.2.0-8+etch10
Show 12 moreShow less
5.2.0-8+etch115.2.0-8+etch11~p15.2.0-8+etch135.2.0-8+etch35.2.0-8+etch45.2.0-8+etch5~pu15.2.0-8+etch65.2.0-8+etch75.2.0-8+etch85.2.0-8+etch95.2.0-8+etch9~bpo31+15.2.0-9
5.2.0+dfsg-8+etch15
php5
Debian:5.0
 before 5.2.6.dfsg.1-1+lenny3, plus listed versions
5.2.6.dfsg.1-1+lenny2
5.2.6.dfsg.1-1+lenny3
php5
Debian:5.0
 before 5.2.6.dfsg.1-1+lenny2
5.2.6.dfsg.1-1+lenny2
php
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-devel
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-imap
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-ldap
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-mysql
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-odbc
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
Show 145 moreShow less
Affected packages
PackageAffectedFixed
php-pgsql
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-devel
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-imap
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-ldap
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-mysql
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-odbc
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-pgsql
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-devel
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-imap
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-ldap
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-mysql
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-odbc
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-pgsql
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-devel
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-imap
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-ldap
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-mysql
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-odbc
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php-pgsql
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-51.ent
0:4.3.2-51.ent
php
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-devel
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-domxml
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-gd
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-imap
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ldap
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mbstring
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mysql
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ncurses
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-odbc
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pear
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pgsql
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-snmp
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-xmlrpc
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-devel
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-domxml
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-gd
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-imap
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ldap
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mbstring
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mysql
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ncurses
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-odbc
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pear
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pgsql
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-snmp
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-xmlrpc
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-devel
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-domxml
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-gd
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-imap
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ldap
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mbstring
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mysql
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ncurses
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-odbc
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pear
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pgsql
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-snmp
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-xmlrpc
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-devel
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-domxml
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-gd
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-imap
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ldap
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mbstring
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-mysql
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-ncurses
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-odbc
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pear
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-pgsql
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-snmp
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php-xmlrpc
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.15
0:4.3.9-3.22.15
php
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-bcmath
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-cli
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-common
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-dba
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-gd
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-imap
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-ldap
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-mbstring
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-mysql
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-ncurses
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-odbc
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-pdo
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-pgsql
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-snmp
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-soap
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-xml
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-xmlrpc
Red Hat:enterprise_linux:5::client_workstation
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-bcmath
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-cli
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-common
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-dba
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-devel
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-gd
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-imap
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-ldap
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-mbstring
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-mysql
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-ncurses
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-odbc
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-pdo
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-pgsql
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-snmp
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-soap
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-xml
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-xmlrpc
Red Hat:enterprise_linux:5::server
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-bcmath
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-cli
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-common
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-dba
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-debuginfo
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-devel
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-gd
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-imap
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-ldap
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-mbstring
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-mysql
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-ncurses
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-odbc
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-pdo
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-pgsql
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-snmp
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-soap
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-xml
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-xmlrpc
Red Hat:rhel_application_stack:2
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-5557 is a high vulnerability (CVSS 10.0) in Php, published December 23, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.37%, the 94th percentile. Fixed in php5 5.2.0+dfsg-8+etch15.

References

Show 64 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open