CVE-2015-0273
Php < 5.4.37 - Use After Free
Title source: ruleDescription
Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.
Exploits (1)
References (28)
... and 8 more
Scores
EPSS
0.7115
EPSS Percentile
98.7%
Details
Status
published
Products (29)
php/php
5.5.0 (13 CPE variants)
php/php
5.5.1
php/php
5.5.2
php/php
5.5.3
php/php
5.5.4
php/php
5.5.5
php/php
5.5.6
php/php
5.5.7
php/php
5.5.8
php/php
5.5.9
... and 19 more
Published
Mar 30, 2015
Tracked Since
Feb 18, 2026