CVE-2010-2094

CVE-2010-2094 describes multiple format string vulnerabilities in the phar extension of PHP 5.3 before version 5.3.2. Attackers can exploit these flaws by crafting a malicious phar:// URI, which is improperly handled by several internal functions within the phar extension. This vulnerability carries a CVSS score of 6.8, indicating a medium severity, and allows unauthenticated, remote attackers to potentially obtain sensitive memory contents and execute arbitrary code with moderate attack complexity. While not listed on the KEV catalog, exploit code is publicly available on ExploitDB, though there is minimal community discussion or media coverage surrounding this CVE.