CVE-2010-2097

CVE-2010-2097 describes an information disclosure vulnerability in PHP versions 5.2 through 5.2.13 and 5.3 through 5.3.2. Specifically, the iconv_mime_decode, iconv_substr, and iconv_mime_encode functions can be exploited by attackers to obtain sensitive memory contents due to a flaw related to the call time pass by reference feature. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and potential for partial confidentiality impact, but no integrity or availability impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.