Description

Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-4409.

Remediation

References

CVE-2011-1467

Related Vulnerabilities

osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-7196)

Joomla! Core 1.5.x Multiple Cross-Site Scripting Vulnerabilities (1.5.0 - 1.5.20)

WordPress Plugin WP Database Backup Unspecified Vulnerability (4.1)

MySQL Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2005-0004)

WordPress Plugin Kama Click Counter Cross-Site Scripting (3.4.9)

Severity

Medium

Classification

CVE-2011-1467

Tags

Missing Update Known Vulnerabilities