CVE-2006-4020

PHP <5.1.4 & <4.4.3 - Buffer Overflow

Title source: llm

Description

scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Andi · phplocallinux
https://www.exploit-db.com/exploits/2193

References (39)

... and 19 more

Scores

EPSS 0.0586
EPSS Percentile 90.6%

Details

Status published
Products (34)
php/php 4.0 (8 CPE variants)
php/php 4.0.0
php/php 4.0.1 (3 CPE variants)
php/php 4.0.2
php/php 4.0.3 (2 CPE variants)
php/php 4.0.4 (2 CPE variants)
php/php 4.0.5
php/php 4.0.6
php/php 4.0.7 (4 CPE variants)
php/php 4.1.0
... and 24 more
Published Aug 08, 2006
Tracked Since Feb 18, 2026