Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Smalyshev

#38513de 56,330
7.5CVSS total
Vulnerabilidades · 1
PT-2015-1020
7.5
2015-03-20
Php · Php · CVE-2015-2787
**Name of the Vulnerable Software and Affected Versions** PHP versions prior to 5.4.39 PHP versions 5.5.x prior to 5.5.23 PHP versions 5.6.x prior to 5.6.7 **Description** The issue is related to a use-after-free vulnerability in the `process nested data` function. This vulnerability allows remote attackers to execute arbitrary code via a crafted `unserialize` call. The exploitation involves leveraging the use of the `unset` function within an ` wakeup` function. **Recommendations** For PHP versions prior to 5.4.39, update to version 5.4.39 or later. For PHP versions 5.5.x prior to 5.5.23, update to version 5.5.23 or later. For PHP versions 5.6.x prior to 5.6.7, update to version 5.6.7 or later.