Description
PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_entity_decode function and sends the encoded results back to the client, aka a "binary safety" issue. NOTE: this issue has been referred to as a "memory leak," but it is an information leak that discloses memory contents.
Remediation
References
Related Vulnerabilities
phpList Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-6178)
MySQL Other Vulnerability (CVE-2001-0407)
WordPress Plugin Admin Columns CSV Injection (3.4.6)
WordPress Plugin 10Web AI Assistant-AI content writing assistant Security Bypass (1.0.18)
WordPress Plugin User Role by BestWebSoft Cross-Site Scripting (1.5.5)