{"id":"CVE-2010-3870","aliases":["DSA-2195-1","EUVD-2010-3848","GHSA-gvvf-r2h9-2v8x","RHSA-2010:0919","RHSA-2011:0195"],"status":"published","title":"The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8...","description":"The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.11281,"percentile":0.96,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-20"],"published":"2010-11-12T20:00:00Z","modified":"2026-06-26T12:21:31Z","exploits":[{"source":"exploitdb","id":"EDB-34950","title":"PHP 5.3.2 - 'xml_utf8_decode()' UTF-8 Input Validation","type":"remote","platform":"php","date":"2009-05-11","verified":true,"url":"https://www.exploit-db.com/exploits/34950"}],"affected":[{"source":"osv","ecosystem":"Debian:5.0","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6.dfsg.1-1+lenny10"}]}],"versions":["5.2.6.dfsg.1-1+lenny2","5.2.6.dfsg.1-1+lenny3","5.2.6.dfsg.1-1+lenny4","5.2.6.dfsg.1-1+lenny6","5.2.6.dfsg.1-1+lenny8","5.2.6.dfsg.1-1+lenny9"],"bundled":6},{"source":"osv","ecosystem":"Debian:6.0","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-7+squeeze1"}]}],"versions":["5.3.3-7"],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-domxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-domxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-domxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-domxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.31"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.6-27.el5_5.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"php-zts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"php-zts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-zts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-zts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-6.el6_0.1"}]}],"bundled":4}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"php","product":"php"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2010/11/02/11","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0077","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42812","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/11/02/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0195.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/11/02/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1024797","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://bugs.php.net/bug.php?id=49687","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Vendor Advisory"]},{"url":"http://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1042-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/11/02/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0919.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://bugs.php.net/bug.php?id=48230","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0021","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory"]},{"url":"http://www.php.net/ChangeLog-5.php","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/11/02/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42410","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory"]},{"url":"http://www.mandriva.com/en/security/advisories?name=MDVSA-2010:224","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/11/03/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://svn.php.net/viewvc?view=revision\u0026revision=304959","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0020","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/11/02/8","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/44605","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://us2.php.net/manual/en/function.utf8-decode.php#83935","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory"]},{"url":"http://www.acunetix.com/blog/web-security-articles/security-risks-associated-with-utf8_decode/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3081","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4581","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3870","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0919","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2011:0195","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-3870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=649056","tags":["report"]},{"url":"http://www.acunetix.com/blog/web-security-articles/security-risks-associated-with-utf8_decode"},{"url":"https://github.com/advisories/GHSA-gvvf-r2h9-2v8x"},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=573779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=577582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=617232","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=617673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=619030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=652836","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0919.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-5016","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-5016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-5016","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0397","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0397","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0397","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1128","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1128","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1128","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1917","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1917","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1917","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2531","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2531","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2531","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-3065","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3065","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3065","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3870","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=651206","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=667806","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0195.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-3709","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3709","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3709","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4645","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2010-3870","description":"The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string.","status":"published","published":"2010-11-12T20:00:00Z","modified":"2024-08-07T03:26:11.478Z","updated_at":"2026-11-02T14:33:27.739358Z"}],"euvd":[{"id":"EUVD-2010-3848","description":"The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string.","status":"published","published":"2010-11-12T20:00:00Z","modified":"2024-08-07T03:26:11Z","updated_at":"2026-11-03T01:39:32.539513Z"}],"ghsa":[{"id":"GHSA-gvvf-r2h9-2v8x","title":"The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8...","description":"The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string.","status":"published","published":"2022-05-14T02:16:07Z","modified":"2025-04-11T03:42:08Z","cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:06.818128Z"}],"nvd":[{"id":"CVE-2010-3870","description":"The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string.","status":"published","published":"2010-11-12T21:00:02.937Z","modified":"2026-06-16T23:23:43.477Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:01:57.065463Z"}],"osv":[{"id":"DSA-2195-1","title":"php5 - several","status":"published","published":"2011-03-19T00:00:00Z","modified":"2026-03-09T01:18:52.015186Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"RHSA-2010:0919","title":"Red Hat Security Advisory: php security update","status":"published","published":"2024-09-15T18:36:38Z","modified":"2026-06-26T10:14:47Z","updated_at":"2026-11-02T15:53:01.003286Z"},{"id":"RHSA-2011:0195","title":"Red Hat Security Advisory: php security update","status":"published","published":"2024-09-15T18:55:54Z","modified":"2026-06-26T12:21:31.484611229Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}