Summary
PHP is prone to a remote file-include vulnerability because it fails to properly implement the 'is_a()' function.
Exploiting this issue may allow an attacker to compromise PHP applications using the affected function. This may also result in a compromise of the underlying system
other attacks are also possible.
PHP 5.3.7 and 5.3.8 are vulnerable.
Solution
Updates are available. Please see the references for more information.
References
Severity
Classification
-
CVE CVE-2011-3379 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Adobe Air Multiple Vulnerabilities - November12 (Windows)
- Adobe Flash Player 9.0.115.0 and earlier vulnerability (Lin)
- Adobe Captivate Insecure Library Loading Vulnerability
- Adobe Acrobat and Reader PDF Handling Code Execution Vulnerability (Windows)
- Adobe Air Multiple Vulnerabilities -01 May 13 (Mac OS X)