Re: Use After Free Vulnerabilities in unserialize()

Posted by Christian Kujau on Sep 16

Has 10.11 been released yet? And MacOSX 10.10.5 already ships with PHP
v5.5.27

$ php uafpoc.php
Warning: Class __PHP_Incomplete_Class has no unserializer in uafpoc.php on line 20
bool(false)

$ php -v
PHP 5.5.27 (cli) (built: Jul 23 2015 00:21:59)
Copyright (c) 1997-2015 The PHP Group
Zend Engine v2.5.0, Copyright (c) 1998-2015 Zend Technologies

Leave a Reply