CVE-2009-2626
MEDIUM 6.4EPSS 8.3%
The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore function to restore the variable.
- CVSS v2.0
- 6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:P - EPSS
- 8.31% chance of exploitation in the next 30 days, 95th percentile
- Published
- 2009-12-01
- Updated
- 2024-09-16
ExploitDB entries (3)
- https://www.exploit-db.com/exploits/33163
- https://www.exploit-db.com/exploits/33162
- https://www.exploit-db.com/exploits/10296