CVE-2010-2093: Use After Free
Published May 27, 2010
·Updated
Use-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5.3 before 5.3.2 allows context-dependent attackers to cause a denial of service (crash) via a stream context structure that is freed before destruction occurs.
Affected Software
15 affected components
PHP PHP=5.2.9
PHP PHP=5.3.1
PHP PHP=5.2.7
PHP PHP=5.2.2
PHP PHP=5.2.5
PHP PHP=5.2.12
PHP PHP=5.2.11
PHP PHP=5.2.6
PHP PHP=5.3.0
PHP PHP=5.2.3
PHP PHP=5.2.0
PHP PHP=5.2.4
PHP PHP=5.2.10
PHP PHP=5.2.1
PHP PHP=5.2.8
Event History
May 27, 2010
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-2093?
CVE-2010-2093 is classified as a high severity vulnerability due to its ability to cause denial of service.
2
How do I fix CVE-2010-2093?
To fix CVE-2010-2093, upgrade your PHP to versions 5.2.13 or later, or 5.3.2 or later.
3
Which PHP versions are affected by CVE-2010-2093?
CVE-2010-2093 affects PHP versions 5.2.0 through 5.2.12 and 5.3.0 through 5.3.1.
4
What does the CVE-2010-2093 vulnerability allow attackers to do?
CVE-2010-2093 allows attackers to cause a denial of service by using a modified stream context structure.
5
How can I identify if my application is vulnerable to CVE-2010-2093?
You can identify vulnerability to CVE-2010-2093 by checking if your PHP version is below 5.2.13 or 5.3.2.