CVE-2011-0754

CVE-2011-0754 describes a vulnerability in the SplFileInfo::getType function of the PHP Standard PHP Library (SPL) extension, specifically affecting PHP versions prior to 5.3.4 on Windows. This flaw prevents proper detection of symbolic links, potentially enabling local users to perform symlink attacks due to cross-platform differences in the stat structure. The vulnerability has a CVSS score of 4.4, indicating a medium severity with a local attack vector and medium attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. Its EPSS and FAUCET scores are very low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, exploit code availability in common repositories like Metasploit or ExploitDB, or significant community discussion or media coverage surrounding this CVE.