CVEvulnerability
CVE-2010-2225
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-06-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.
Affected configurations
• php php 5.2.0
• php php 5.2.1
• php php 5.2.2
• php php 5.2.3
• php php 5.2.4
• php php 5.2.5
• php php 5.2.6
• php php 5.2.7
• php php 5.2.8
• php php 5.2.9
• php php 5.2.10
• php php 5.2.11
• php php 5.2.12
• php php 5.2.13
• php php 5.3.0
• php php 5.3.1
• php php 5.3.2
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=133469208622507&w=2 marc.info
- http://pastebin.com/mXGidCsd Exploit
- http://secunia.com/advisories/40860 secunia.com
- http://support.apple.com/kb/HT4312 support.apple.com
- http://twitter.com/i0n1c/statuses/16373156076 twitter.com
- http://twitter.com/i0n1c/statuses/16447867829 twitter.com
- http://www.debian.org/security/2010/dsa-2089 www.debian.org
- http://www.securityfocus.com/bid/40948 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=605641 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59610 exchange.xforce.ibmcloud.com
- http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=133469208622507&w=2 marc.info
- http://pastebin.com/mXGidCsd Exploit
- http://secunia.com/advisories/40860 secunia.com
- http://support.apple.com/kb/HT4312 support.apple.com
- http://twitter.com/i0n1c/statuses/16373156076 twitter.com
- http://twitter.com/i0n1c/statuses/16447867829 twitter.com
- http://www.debian.org/security/2010/dsa-2089 www.debian.org
- http://www.securityfocus.com/bid/40948 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=605641 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59610 exchange.xforce.ibmcloud.com