CVE-2010-4657

7.5

HIGHCVSS v3

Published

November 13, 2019

CVSS v2

5 MEDIUM

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.

@now/php

NPM

>= 5.0.0, < 5.4.4NVD

php

Crates.ioRust bindings for the PHP runtime

>= 5.0.0, < 5.4.4NVD

php

NPMAllows you to run PHP code in Node.js in various ways.

More on this CVE

NVD↗GitHub Advisory↗

>= 5.0.0, < 5.4.4NVD

php

Python Package IndexHandle some of the strange standards in PHP projects

>= 5.0.0, < 5.4.4NVD

Security Advisories

CVE-2010-4657

Description

More on this CVE