Information disclosure in Php

CVE-2010-2484

The strrchr function in PHP 5.2 before 5.2.14 allows context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by causing a userspace interruption of an internal function or handler.

Vulnerability class: Information Disclosure

EPSS: 0.018 (76.6th percentile) — read the EPSS interpretation.

Affected products

  • Php — versions 5.2.2, 5.2.3, 5.2.0
  • N/a — versions n/a

Weakness classification (CWE)

References