CVE-2015-0273
PHP < 5.4.38, 5.5.x < 5.5.22, 5.6.x < 5.6.6 - Use-After-Free via Crafted Serialized DateTime Data
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2015-0273. PoCs published by Taoguang Chen.
AI-analyzed exploit summary This exploit leverages a use-after-free vulnerability in PHP's unserialize() function with DateTimeZone objects to achieve arbitrary code execution. The PoC demonstrates memory corruption by manipulating references to freed objects, allowing an attacker to execute shell commands.
Description
Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.
Exploits (1)
This exploit leverages a use-after-free vulnerability in PHP's unserialize() function with DateTimeZone objects to achieve arbitrary code execution. The PoC demonstrates memory corruption by manipulating references to freed objects, allowing an attacker to execute shell commands.