SUSE CVE-2009-5016

Integer overflow in the xmlutf8decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870...

PT-2010-1818

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.2.11 Description The issue is related to an integer overflow in the xml utf8 decode function, which can be exploited by remote attackers using a crafted string with overlong UTF-8 encoding. This allows attackers to bypa...