CVE-2011-3379 in PHP
Resumen (Inglés)
The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted URL and leveraging potentially unsafe behavior in certain PEAR packages and custom autoloaders.
Reservar
2011-08-30
Divulgación
2011-11-03
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 59364 | PHP __autoload escalada de privilegios | 94 | No está definido | No está definido | CVE-2011-3379 |