Public Date:
656917: CVE-2010-4150 php: Double free in the imap extension

The MITRE CVE dictionary describes this issue as:

Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.

Find out more about CVE-2010-4150 from the MITRE CVE dictionary dictionary and NIST NVD.


We do not consider safe_mode / open_basedir restriction bypass issues to be
security sensitive. For more details see and

CVSS v2 metrics

NOTE: The following CVSS v2 metrics and score provided are preliminary and subject to review.

Base Score 3.6
Base Metrics AV:L/AC:L/Au:N/C:N/I:P/A:P
Access Vector Local
Access Complexity Low
Authentication None
Confidentiality Impact None
Integrity Impact Partial
Availability Impact Partial

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Affected Packages State

Platform Package State
Red Hat Enterprise Linux 6 php Will not fix
Red Hat Enterprise Linux 5 php Will not fix
Red Hat Enterprise Linux 4 php Will not fix
Last Modified

CVE description copyright © 2017, The MITRE Corporation