CVE-2011-3379 in PHP
Summary
The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted URL and leveraging potentially unsafe behavior in certain PEAR packages and custom autoloaders.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
08/30/2011
Disclosure
11/03/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 59364 | PHP __autoload code injection | 94 | Not defined | Not defined | CVE-2011-3379 |