VULNERABILITY INTELLIGENCE

CVE-2010-4697

CVSS score6.8 NONE
EPSS probability2.27%
CISA KEVNot currently listed
Published2011-01-18
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to cause a denial of service (heap memory corruption) or have unspecified other impact via vectors related to use of __set, __get, __isset, and __unset methods on objects accessed by a reference.

Weakness classification

  • nvd@nist.gov: CWE-399

Primary references