system
Describe <CVE-2010-4657>.
user
What is <CVE-2010-4657>?
assistant
PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output..