AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-2950

MEDIUM · CVSS 6.8 EPSS 5.69%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-09-28 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.8. See the original NVD description below for full technical details.

CVE
CVE-2010-2950
Severity
MEDIUM
CVSS
6.8
EPSS
5.69%

Original NVD Description

Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the phar_stream_flush function, leading to errors in the php_stream_wrapper_log_error function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2094.