CVE-2012-2376
EXPLOITED IN THE WILDPHP < 5.4.3 - Remote Code Execution via COM Object VARIANT Type Handling
Title source: manualExploitation Summary
CVE-2012-2376 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 1 public exploit from researchers including 0in.
AI-analyzed exploit summary This exploit targets a Variant type parsing vulnerability in PHP 5.4.3 on Windows XP SP3, using heap spraying and a bind shell payload to achieve remote code execution.
Description
Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM object VARIANT types, as exploited in the wild in May 2012.
Exploits (1)
This exploit targets a Variant type parsing vulnerability in PHP 5.4.3 on Windows XP SP3, using heap spraying and a bind shell payload to achieve remote code execution.