Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Smalyshev

#35301de 53,630
7.5CVSS total
Vulnerabilidades · 1
PT-2015-1020
7.5
2015-03-20
Php · Php · CVE-2015-2787
**Name of the Vulnerable Software and Affected Versions** PHP versions prior to 5.4.39 PHP versions 5.5.x prior to 5.5.23 PHP versions 5.6.x prior to 5.6.7 **Description** The issue is related to a use-after-free vulnerability in the `process nested data` function. This vulnerability allows remote attackers to execute arbitrary code via a crafted `unserialize` call. The exploitation involves leveraging the use of the `unset` function within an ` wakeup` function. **Recommendations** For PHP versions prior to 5.4.39, update to version 5.4.39 or later. For PHP versions 5.5.x prior to 5.5.23, update to version 5.5.23 or later. For PHP versions 5.6.x prior to 5.6.7, update to version 5.6.7 or later.