Description

Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.

Remediation

References

CVE-2010-2225

Related Vulnerabilities

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-2607)

Apache Tomcat Improper Locking Vulnerability (CVE-2019-10072)

WordPress Cookie Data PHP Code Injection Vulnerability (1.5 - 1.5.1.3)

Joomla! Core 1.7.0 Information Disclosure (1.7.0)

WordPress Plugin G-Lock Double Opt-in Manager 'ajaxbackend.php' SQL Injection (2.6.2)

Severity

High

Classification

CVE-2010-2225

Tags

Missing Update Known Vulnerabilities