السلام عليكم و رحمة الله و بركاته
اخواني هل احد عنده فكرة ما هي هذه الثغره او ما سببها و كيفية تلافيها
HTML Entity Encoder Heap Overflow
هذا ما قرأته عنها و لكن لم افهم اي شيء اين الثغره تكون و كيفية تلافيها
Stefan Esser reported some vulnerabilities in PHP, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.The vulnerabilities are caused due to boundary errors within the "htmlentities()" and "htmlspecialchars()" functions. If a PHP application uses these functions to process user-supplied input, this can be exploited to cause a heap-based buffer overflow by passing specially crafted data to the affected application. Successful exploitation may allow execution of arbitrary code, but requires that the UTF-8 character set is selected. For a detailed explanation of the vulnerability read the referenced article.
Vendor has released PHP 5.2.0 which fixes this issue.
Affected PHP versions (up to 4.4.4/5.1.6).
و شكرا
رد مع اقتباس
المشاركة الأصلية كتبت بواسطة RED_LINE
