CVE-2015-6831 in PHP
Sumário (Inglês)
Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.
Reservar
08/09/2015
Divulgação
19/01/2016
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 80323 | PHP SPL SplDoublyLinkedList Excesso de tampão | 416 | Não definido | Correção oficial | CVE-2015-6831 |