CVE-2010-2225
Last modified
CVE-2010-2225 is a vulnerability of currently unknown severity. Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.. EPSS estimates a 5.34% chance of exploitation in the next 30 days.
Description
Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Php | Php | 5.2.0 |
| Php | Php | 5.2.1 |
| Php | Php | 5.2.2 |
| Php | Php | 5.2.3 |
| Php | Php | 5.2.4 |
| Php | Php | 5.2.5 |
| Php | Php | 5.2.6 |
| Php | Php | 5.2.7 |
| Php | Php | 5.2.8 |
| Php | Php | 5.2.9 |
| Php | Php | 5.2.10 |
| Php | Php | 5.2.11 |
| Php | Php | 5.2.12 |
| Php | Php | 5.2.13 |
| Php | Php | 5.3.0 |
| Php | Php | 5.3.1 |
| Php | Php | 5.3.2 |
References
- http://pastebin.com/mXGidCsdExploit
- http://pastebin.com/mXGidCsdExploit
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-2225?
How severe is CVE-2010-2225?
How do I fix CVE-2010-2225?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-2219Unspecified vulnerability in Adobe Flash Media Server (FMS) …
- CVE-2010-2220Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x befor…
- CVE-2010-2221Multiple buffer overflows in the iSNS implementation in isns…
- CVE-2010-2222The _ger_parse_control function in Red Hat Directory Server …7.5
- CVE-2010-2223Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise …
- CVE-2010-2224The snapshot merging functionality in Red Hat Enterprise Vir…
- CVE-2010-2226The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux …
- CVE-2010-2227Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, an…
- CVE-2010-2228Cross-site scripting (XSS) vulnerability in the MNET access-…
- CVE-2010-2229Multiple cross-site scripting (XSS) vulnerabilities in blog/…
- CVE-2010-2230The KSES text cleaning filter in lib/weblib.php in Moodle be…
- CVE-2010-2231Cross-site request forgery (CSRF) vulnerability in report/ov…
Are you affected by CVE-2010-2225?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST