PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.
CPE | Name | Operator | Version |
---|---|---|---|
debian_linux | eq | 8.0 | |
php | ge | 5.0.0 | |
php | lt | 5.4.4 | |
enterprise_linux | eq | 6.0 | |
enterprise_linux | eq | 5.0 |