CVE-2010-4697 in PHPinfo

Summary

Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to cause a denial of service (heap memory corruption) or have unspecified other impact via vectors related to use of __set, __get, __isset, and __unset methods on objects accessed by a reference.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

01/18/2011

Disclosure

01/18/2011

Entries

1

CPE

ready

CVSS

7.3

EPSS

0.01387

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!