CVE-2006-5465

CVE-2006-5465 describes a buffer overflow vulnerability in PHP versions prior to 5.2.0, specifically affecting the htmlentities and htmlspecialchars functions when processing crafted UTF-8 inputs. This flaw allows remote attackers to execute arbitrary code, posing a significant risk to affected PHP installations. With a CVSS score of 7.5 and a FAUCET Risk Score of 96/100, the vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the high EPSS score indicates a notable exploitability probability. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered widespread attention.