CVE-2011-3379

The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by…

published November 3, 2011

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted URL and leveraging potentially unsafe behavior in certain PEAR packages and custom autoloaders.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05010 · 92.2th percentile
Published
2011-11-03T15:00Z
EPSS history
Timeline
  • 03 NOV 15:00Z
    The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by…
    cvelistv5