CVE-2010-1861

Published: May 7, 2010Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

The sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to write to arbitrary memory addresses by using an object's __sleep function to interrupt an internal call to the shm_put_var function, which triggers access of a freed resource.

Affected (16)

Products: Php: Php

Php

1 product

Php

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Php Php	Version 5.2.0
Php Php	Version 5.2.10
Php Php	Version 5.2.11
Php Php	Version 5.2.12
Php Php	Version 5.2.13
Php Php	Version 5.2.1
Php Php	Version 5.2.2
Php Php	Version 5.2.3
Php Php	Version 5.2.4
Php Php	Version 5.2.5
Php Php	Version 5.2.6
Php Php	Version 5.2.8
Php Php	Version 5.2.9

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Php Php	Version 5.3.0
Php Php	Version 5.3.1
Php Php	Version 5.3.2

Related CWEs

CWE-399

References (2)

http://php-security.org/2010/05/05/mops-2010-009-php-shm_put_var-already-freed-resource-access-vulnerability/index.html

Source: cve@mitre.org

Exploit

http://php-security.org/2010/05/05/mops-2010-009-php-shm_put_var-already-freed-resource-access-vulnerability/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.