CVE-2010-2225: php Resource Management Errors
Vulnerability summary
CVE-2010-2225 is a high (CVSS 7.5) Resource Management Errors vulnerability in php. EPSS estimates a 5.34% chance of exploitation in the next 30 days, higher than 92.6% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 4 · Related 3Timeline
- 23-06-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
5.34%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
No change 0.00 pp
From 5.34% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (pastebin.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Php1 product
- phpEOL5.2.0 | 5.2.1 | 5.2.2 | 5.2.3 | 5.2.4 | 5.2.5 | 5.2.6 | 5.2.7 | 5.2.8 | 5.2.9 | 5.2.10 | 5.2.11 | 5.2.12 | 5.2.13 | 5.3.0 | 5.3.1 | 5.3.2
1 vendor · 1 product
References
13 links- twitter.com/i0n1c/statuses/16373156076X Refsource MISC
- bugzilla.redhat.com/show_bug.cgi?id=605641X Refsource MISC
- support.apple.com/kb/HT4312X Refsource CONFIRM
- twitter.com/i0n1c/statuses/16447867829X Refsource MISC