medium6.4
CVE-2010-1861
The sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to write to arbitrary memory addresses by using an ob…
Impact
The sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to write to arbitrary memory addresses by using an object's __sleep function to interrupt an internal call to the shm_put_var function, which triggers access of a freed resource.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php | Php | Versions 5.2.0, 5.2.1, 5.2.2, 5.2.3, 5.2.4, 5.2.5 |