Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Apply OS X security update 2011-004Upgrade macOS to the latest versionApply OS X security update 2011-001 | Aug 28, 2015 | Dec 7, 2010 |
| Apple Osx Php | — | Upgrade macOS to the latest version | Dec 16, 2011 | Dec 7, 2010 |
| Freebsd | — | Upgrade php52-imapUpgrade php5-imap | Dec 10, 2025 | Jan 13, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Dec 7, 2010 |
| Php | — | Upgrade to PHP version 5.3.4Upgrade to PHP version 5.2.15 | Oct 1, 2012 | Dec 7, 2010 |
| Suse | — | Upgrade php8-socketsUpgrade php53-ctypeUpgrade php8-ctypeUpgrade php8-bz2Upgrade php8-soapUpgrade php7Upgrade php5-xmlreaderUpgrade php8-posixUpgrade php5-pdoUpgrade php5-develUpgrade php72-develUpgrade php8-xmlwriterUpgrade php53Upgrade php8-curlUpgrade php5-soapUpgrade php5-mcryptUpgrade php5-tokenizerUpgrade php53-pdoUpgrade php8-fpm-apacheUpgrade php7-xmlreaderUpgrade php53-imapUpgrade php8-tidyUpgrade php8-fpmUpgrade php53-fileinfoUpgrade php53-pcntlUpgrade php8-develUpgrade php5-snmpUpgrade php53-opensslUpgrade php8-zipUpgrade php8-mysqlUpgrade php5-pcntlUpgrade php53-iconvUpgrade php8-cliUpgrade php5-mysqlUpgrade php53-xmlwriterUpgrade php5-suhosinUpgrade php53-xmlrpcUpgrade php53-gmpUpgrade php53-fastcgiUpgrade php8-opcacheUpgrade php8-sysvmsgUpgrade php5-shmopUpgrade php8-tokenizerUpgrade php53-sysvshmUpgrade php5-bcmathUpgrade php5-dbaUpgrade php8-gdUpgrade php53-xmlreaderUpgrade php5-pgsqlUpgrade php5-odbcUpgrade php5-pspellUpgrade php53-xslUpgrade php53-pearUpgrade php5-dbaseUpgrade php53-sqliteUpgrade php5-curlUpgrade php8-mbstringUpgrade php8-intlUpgrade php53-gdUpgrade php53-dbaUpgrade php8-dbaUpgrade php5Upgrade php5-bz2Upgrade php8-ldapUpgrade php8Upgrade php8-snmpUpgrade php5-gmpUpgrade php5-pearUpgrade php8-zlibUpgrade php5-calendarUpgrade php8-calendarUpgrade php7-mysqlUpgrade php53-snmpUpgrade php8-odbcUpgrade php53-zipUpgrade php53-bcmathUpgrade php8-domUpgrade php8-xslUpgrade php53-mcryptUpgrade php7-sqliteUpgrade php53-readlineUpgrade php53-intlUpgrade php5-ldapUpgrade php5-hashUpgrade php7-domUpgrade php8-xmlreaderUpgrade php53-zlibUpgrade php53-pspellUpgrade php5-jsonUpgrade php53-exifUpgrade php5-xslUpgrade php5-xmlrpcUpgrade php8-sysvshmUpgrade php5-opensslUpgrade php5-gdUpgrade php8-ffiUpgrade php53-develUpgrade php5-domUpgrade php8-opensslUpgrade apache2-mod_php5Upgrade php8-gmpUpgrade php53-ftpUpgrade php53-shmopUpgrade php5-zipUpgrade php5-gettextUpgrade php53-soapUpgrade php53-gettextUpgrade php5-xmlwriterUpgrade php7-pdoUpgrade php7-develUpgrade php8-exifUpgrade php8-sqliteUpgrade php53-socketsUpgrade php8-gettextUpgrade php8-bcmathUpgrade php8-iconvUpgrade apache2-mod_php53Upgrade php5-fastcgiUpgrade php7-pgsqlUpgrade php8-shmopUpgrade php53-mbstringUpgrade php5-iconvUpgrade php53-curlUpgrade php8-pgsqlUpgrade apache2-mod_php8Upgrade php5-mbstringUpgrade php8-readlineUpgrade php53-wddxUpgrade php53-calendarUpgrade php53-ldapUpgrade php7-iconvUpgrade php8-pcntlUpgrade php8-enchantUpgrade php5-sysvsemUpgrade php8-sodiumUpgrade php53-suhosinUpgrade php7-xmlwriterUpgrade php5-sysvmsgUpgrade php8-fileinfoUpgrade php53-sysvsemUpgrade php53-jsonUpgrade apache2-mod_php7Upgrade php53-bz2Upgrade php5-zlibUpgrade php53-sysvmsgUpgrade php7-ctypeUpgrade php53-odbcUpgrade php5-ftpUpgrade php5-sysvshmUpgrade php53-mysqlUpgrade php5-ctypeUpgrade php53-pgsqlUpgrade php53-posixUpgrade php8-ftpUpgrade php8-fastcgiUpgrade php5-exifUpgrade php53-tokenizerUpgrade php53-domUpgrade php7-tokenizerUpgrade php8-sysvsemUpgrade php8-pharUpgrade php8-pdoUpgrade php53-tidyUpgrade php5-wddxUpgrade php8-embedUpgrade php7-json | Feb 17, 2015 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub