What’s Vulnerable › Vulnerabilities

CVE-2006-4020

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2006-08-08 · updated 2026-06-16

Description

scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read.

Affected products

• PHP: 4.0, 4.0-beta_4_patch1, 4.0-beta1, 4.0-beta2, 4.0-beta3, 4.0-beta4 (+61)

References

• http://bugs.php.net/bug.php?id=38322
• http://rhn.redhat.com/errata/RHSA-2006-0688.html
• http://rhn.redhat.com/errata/RHSA-2006-0736.html
• http://secunia.com/advisories/21403
• http://secunia.com/advisories/21467
• http://secunia.com/advisories/21546
• http://secunia.com/advisories/21608
• http://secunia.com/advisories/21683
• http://secunia.com/advisories/21768
• http://secunia.com/advisories/21847
• http://secunia.com/advisories/22004

Get alerted when CVE-2006-4020 or the next vulnerability affects your stack