Description
The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.
Remediation
References
Related Vulnerabilities
Omeka Server-Side Request Forgery (SSRF) Vulnerability (CVE-2023-3981)
MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-30152)
Oracle JRE CVE-2013-5776 Vulnerability (CVE-2013-5776)
WordPress Plugin BCS BatchLine Book Importer Security Bypass (1.5.7)
WordPress Plugin Download Manager Directory Traversal (3.2.54)