Description
Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.
Remediation
References
Related Vulnerabilities
WordPress Plugin XEN Carousel Multiple Cross-Site Scripting Vulnerabilities (0.12.2)
MySQL CVE-2013-1526 Vulnerability (CVE-2013-1526)
Roundcube Files or Directories Accessible to External Parties Vulnerability (CVE-2017-16651)
Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51485)