CVE-2016-7480 The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a key is an object, which allows remote attackers to execute arbitrary code or cause...
CriticalCVSS 9.8
EPSS 41.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a key is an object, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access) via crafted serialized data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | >= 7.0.0, < 7.0.11 | 7.0.11 |
| netapp clustered data ontap | All versions | No fix listed |
References
- blog.checkpoint.com third-party-advisory vdb-entry
- blog.checkpoint.com exploit technical-description third-party-advisory
- php.net release-notes vendor-advisory
- 95152 third-party-advisory vdb-entry
- bugs.php.net issue-tracking patch vendor-advisory
- github.com patch third-party-advisory
- security.netapp.com third-party-advisory
- www.youtube.com broken-link third-party-advisory