CVE-2010-4697

php: Zend use-after-free certain methods are called on objects accessed by a reference

Published Jan 18, 2011 CVSS 2.0 · 6.8 Medium EPSS 2.3% KEV · Not listed
Description
Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to cause a denial of service (heap memory corruption) or have unspecified other impact via vectors related to use of __set, __get, __isset, and __unset methods on objects accessed by a reference.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2408-1 php5 security update
EUVD EUVD EUVD-2010-4662 Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to cause a denial of service (heap memory corruption) or have unspecified other impact via vectors related to use of __set, __get, __isset, and __unset methods on objects accessed by a reference.
Ubuntu USN Ubuntu USN USN-1126-1 PHP vulnerabilities
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 3:55 AM
Reserved
Jan 18, 2011, 12:00 AM
Status
Modified
Published
Jan 18, 2011, 8:00 PM
Modified
Jun 16, 2026, 11:25 PM
Severity
Public date
Sep 18, 2010, 12:00 AM