WhiteSource Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2010-2225

Good to know:

Date: June 24, 2010

Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.

Language: C

Severity Score

Related Resources (5)

http://www.securityfocus.com/bid/40948
http://support.apple.com/kb/HT4312
https://nvd.nist.gov/vuln/detail/CVE-2010-2225
http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2010-2225

Severity Score

Weakness Type (CWE)

Resource Management Errors

CWE-399

Top Fix

icon

Upgrade Version

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): PARTIAL
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us