In PHP5.1.6, 4.4.4, and earlier versions, when you look for the encoding of "htmlspecialchars () andhtmlentities, A possible buffer overflow may be triggered when the UTF-8 encoding is selected. "Whileweweresearchingfora
In PHP5.1.6, 4.4.4, and earlier versions, when you look for the encoding of "htmlspecialchars () and htmlentities, A possible buffer overflow may be triggered when the UTF-8 encoding is selected.
"While we were searching for a hole in htmlspecialchars () and htmlentities () to bypass the encoding of certain chars to exploit a possible eval () injection hole in another application we discovered that the implementation contains a possible bufferoverflow that can be triggered when the UTF-8 charset is selected."
The latest PHP5 version 5.2 has fixed this error, but the title still exists in PHP4.4. All information can be viewed in the full vulnerability.