CVE-2010-2225
Priority
Medium
Description
Use-after-free vulnerability in the SplObjectStorage unserializer in PHP
5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary
code or obtain sensitive information via serialized data, related to the
PHP unserialize function.
5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary
code or obtain sensitive information via serialized data, related to the
PHP unserialize function.
References
Notes
mdeslaur> SplObjectStorage doesn't have an unserializer in php 5.1.x
Package
| Upstream: | released (5.3.3) |
| Ubuntu 8.04 LTS (Hardy Heron): | released (5.2.4-2ubuntu5.12) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (5.3.2-1ubuntu4.5) |
Patches:
| Upstream: | http://svn.php.net/viewvc?view=revision&revision=300843 |