Secunia

Stefan Esser has reported a vulnerability in PHP, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to the use of an incorrect regular expression within the "FILTER_VALIDATE_EMAIL" filter of the ext/filter extension. This can be exploited to inject newlines via specially crafted email addresses, which may allow mail header injection.

The vulnerability is reported in PHP 5.2.0 and 5.2.1. Other versions may also be affected.

Solution
Update to version 5.2.3.
Further details available in Customer Area

Provided and/or discovered by
Stefan Esser

Changelog
Further details available in Customer Area

Original Advisory
PHP:
http://www.php.net/releases/5_2_3.php

http://www.php-security.org/MOPB/PMOPB-45-2007.html

Deep Links
Links available in Customer Area