Description

Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.

Remediation

References

CVE-2010-2225

Related Vulnerabilities

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2398)

PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15083)

WordPress Plugin WooCommerce Product Vendors Cross-Site Scripting (2.0.35)

Ruby on Rails Deserialization of Untrusted Data Vulnerability (CVE-2020-8164)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1045)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2010-2225