NVD

Id
13708  
Name
CVE-2010-2225  
Description
Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-06-24  
Modified Date
2016-08-22  
Seq
2010-2225  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
76125 13708 CVE-2010-2225 APPLE-SA-2010-08-24-1  View
76126 13708 CVE-2010-2225 SUSE-SR:2010:017  View
76127 13708 CVE-2010-2225 SUSE-SR:2010:018  View
76128 13708 CVE-2010-2225 SSRT100826  View
76129 13708 CVE-2010-2225 http://pastebin.com/mXGidCsd  View
76130 13708 CVE-2010-2225 http://support.apple.com/kb/HT4312  View
76131 13708 CVE-2010-2225 http://twitter.com/i0n1c/statuses/16373156076  View
76132 13708 CVE-2010-2225 http://twitter.com/i0n1c/statuses/16447867829  View
76133 13708 CVE-2010-2225 DSA-2089  View
76134 13708 CVE-2010-2225 40948  View
76135 13708 CVE-2010-2225 php-splobjectstorage-code-execution(59610)  View
76136 13708 CVE-2010-2225 https://bugzilla.redhat.com/show_bug.cgi?id=605641  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36060 JVNDB-2010-001840 PHP の SplObjectStorage における重要な情報を取得される脆弱性 PHP の SplObjectStorage には、unserialize 関数の処理に関して不備があるため、任意のコードを実行される、または重要な情報を取得される脆弱性が存在します。 CVE-2010-2225 44805 CVE-2010-2225 13708 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001840.html 2010-06-24 2010-10-19 View