CVE-2010-2225: Use After Free

Published Jun 18, 2010

Updated

A vulnerability was found in the SplObjectStorage unserializer. If the PHP unserialize() function is used by a script on untrusted data provided by a remote attacker the attacker may be able to force an information leak or remote execution of code on the server.

This was reported by Stefan Esser at the SyScan'10 Conference in Singapore.

Other sources

Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.

— MITRE

Affected Software

17 affected components

PHP PHP=5.2.9

PHP PHP=5.2.7

PHP PHP=5.2.2

PHP PHP=5.2.5

PHP PHP=5.2.12

PHP PHP=5.2.11

PHP PHP=5.2.6

PHP PHP=5.2.3

PHP PHP=5.2.13

PHP PHP=5.2.0

PHP PHP=5.2.4

PHP PHP=5.2.10

PHP PHP=5.2.1

PHP PHP=5.2.8

PHP PHP=5.3.1

PHP PHP=5.3.0

PHP PHP=5.3.2

Event History

Jun 18, 2010

Data Sourced

01:09 PM

DescriptionSeverityAffected Software

Jun 23, 2010

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-2225?

CVE-2010-2225 is considered a critical vulnerability that can lead to information disclosure and remote code execution.

How do I fix CVE-2010-2225?

To fix CVE-2010-2225, upgrade to a patched version of PHP that addresses this vulnerability.

Which versions of PHP are affected by CVE-2010-2225?

CVE-2010-2225 affects multiple PHP versions, including 5.2.0 through 5.2.13 and 5.3.0 to 5.3.2.

What types of attacks can be executed due to CVE-2010-2225?

CVE-2010-2225 can be exploited to perform remote code execution or information leakage through insecure unserialization.

Who reported the CVE-2010-2225 vulnerability?

CVE-2010-2225 was reported by Stefan Esser.