logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2010-3870

Description

The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string. #### Bugs * <http://bugs.php.net/bug.php?id=49687>


Affected Package


OS OS Version Package Name Package Version
ubuntu 06.06 php5 5.1.2-1ubuntu3.20
ubuntu 08.04 php5 5.2.4-2ubuntu5.13
ubuntu 09.10 php5 5.2.10.dfsg.1-2ubuntu6.6
ubuntu 10.04 php5 5.3.2-1ubuntu4.6
ubuntu 10.10 php5 5.3.3-1ubuntu9.2

Related