CVE-2006-4020
PHP <5.1.4 & <4.4.3 - Buffer Overflow
Title source: llmDescription
scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read.
Exploits (1)
References (39)
... and 19 more
Scores
EPSS
0.0586
EPSS Percentile
90.6%
Details
Status
published
Products (34)
php/php
4.0 (8 CPE variants)
php/php
4.0.0
php/php
4.0.1 (3 CPE variants)
php/php
4.0.2
php/php
4.0.3 (2 CPE variants)
php/php
4.0.4 (2 CPE variants)
php/php
4.0.5
php/php
4.0.6
php/php
4.0.7 (4 CPE variants)
php/php
4.1.0
... and 24 more
Published
Aug 08, 2006
Tracked Since
Feb 18, 2026