CVE

Id
44809  
CVE No.
CVE-2010-2225  
Status
Candidate  
Description
Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.  
Phase
Assigned (20100609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
489380 44809 CVE-2010-2225 MISC:http://pastebin.com/mXGidCsd  View
489381 44809 CVE-2010-2225 MISC:http://twitter.com/i0n1c/statuses/16373156076  View
489382 44809 CVE-2010-2225 MISC:http://twitter.com/i0n1c/statuses/16447867829  View
489383 44809 CVE-2010-2225 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=605641  View
489384 44809 CVE-2010-2225 CONFIRM:http://support.apple.com/kb/HT4312  View
489385 44809 CVE-2010-2225 APPLE:APPLE-SA-2010-08-24-1  View
489386 44809 CVE-2010-2225 URL:http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html  View
489387 44809 CVE-2010-2225 DEBIAN:DSA-2089  View
489388 44809 CVE-2010-2225 URL:http://www.debian.org/security/2010/dsa-2089  View
489389 44809 CVE-2010-2225 HP:HPSBOV02763  View
489390 44809 CVE-2010-2225 URL:http://marc.info/?l=bugtraq&m=133469208622507&w=2  View
489391 44809 CVE-2010-2225 HP:SSRT100826  View
489392 44809 CVE-2010-2225 URL:http://marc.info/?l=bugtraq&m=133469208622507&w=2  View
489393 44809 CVE-2010-2225 SUSE:SUSE-SR:2010:017  View
489394 44809 CVE-2010-2225 URL:http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html  View
489395 44809 CVE-2010-2225 SUSE:SUSE-SR:2010:018  View
489396 44809 CVE-2010-2225 URL:http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html  View
489397 44809 CVE-2010-2225 BID:40948  View
489398 44809 CVE-2010-2225 URL:http://www.securityfocus.com/bid/40948  View
489399 44809 CVE-2010-2225 SECUNIA:40860  View
489400 44809 CVE-2010-2225 URL:http://secunia.com/advisories/40860  View
489401 44809 CVE-2010-2225 XF:php-splobjectstorage-code-execution(59610)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39075 JVNDB-2010-004860 Moodle の blog/index.php におけるクロスサイトスクリプティングの脆弱性 Moodle の blog/index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-2229 44809 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004860.html  View