NetSight
IP …
high7.3

CVE-2015-6831

Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary c…

Impact

Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.

Affected products

VendorProductAffected versions
PhpPhp
before 5.4.44
from 5.5.0 before 5.5.28
from 5.6.0 before 5.6.12
DebianDebian Linux
Versions 7.0, 8.0

Weakness classification

CWE-416

References