6.8
CVSSv2

CVE-2010-4697

Published: 18/01/2011 Updated: 30/10/2018
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Use-after-free vulnerability in the Zend engine in PHP prior to 5.2.15 and 5.3.x prior to 5.3.4 might allow context-dependent malicious users to cause a denial of service (heap memory corruption) or have unspecified other impact via vectors related to use of __set, __get, __isset, and __unset methods on objects accessed by a reference.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

php php 5.2.0

php php 5.2.7

php php 5.2.8

php php 5.1.3

php php 5.1.2

php php 5.0.0

php php 5.0.2

php php 5.0.3

php php 4.0.4

php php 4.0.5

php php 4.1.0

php php 4.1.1

php php 4.2.3

php php 4.3.3

php php 4.3.4

php php 4.3.5

php php 4.4.2

php php 5.2.3

php php 5.2.4

php php 5.2.11

php php 5.2.12

php php 5.1.6

php php 5.1.4

php php 5.1.5

php php 4.0.0

php php 4.0.1

php php 4.0

php php 4.2.0

php php 4.3.1

php php 4.3.10

php php 4.3.8

php php 4.3.9

php php 4.4.6

php php 4.4.7

php php 3.0.1

php php 3.0

php php 3.0.16

php php 3.0.9

php php 1.0

php php 5.2.5

php php 5.2.6

php php 5.2.13

php php 5.1.0

php php

php php 5.0.1

php php 4.0.2

php php 4.0.3

php php 4.2.1

php php 4.2.2

php php 4.3.11

php php 4.3.2

php php 4.4.0

php php 4.4.1

php php 4.4.8

php php 4.4.9

php php 3.0.2

php php 3.0.18

php php 3.0.7

php php 3.0.8

php php 5.2.1

php php 5.2.2

php php 5.2.9

php php 5.2.10

php php 4.4.3

php php 3.0.11

php php 3.0.10

php php 3.0.4

php php 3.0.3

php php 3.0.15

php php 3.0.5

php php 3.0.6

php php 5.1.1

php php 5.0.4

php php 5.0.5

php php 4.0.6

php php 4.0.7

php php 4.1.2

php php 4.3.0

php php 4.3.6

php php 4.3.7

php php 4.4.4

php php 4.4.5

php php 3.0.13

php php 3.0.12

php php 3.0.14

php php 3.0.17

php php 2.0b10

php php 2.0

php php 5.3.0

php php 5.3.1

php php 5.3.2

php php 5.3.3

Vendor Advisories

Several vulnerabilities have been discovered in PHP, the web scripting language The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2011-1072 It was discovered that insecure handling of temporary files in the PEAR installer could lead to denial of service CVE-2011-4153 Maksymilian Arciemowicz discovered ...
USN 1126-1 introduced two regressions in PHP ...
Multiple vulnerabilities in PHP ...