CVE-2010-1862

CVE-2010-1862 describes an information disclosure vulnerability in the chunk_split function of PHP versions 5.2 through 5.2.13 and 5.3 through 5.3.2. This flaw allows attackers to retrieve sensitive memory contents by exploiting a userspace interruption of an internal function, specifically related to the call time pass by reference feature. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and requires no authentication, potentially leading to the disclosure of confidential information. Despite its age, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting it has not garnered significant attention from attackers or researchers.