Description

Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-4409.

Remediation

References

CVE-2011-1467

Related Vulnerabilities

Envoy Proxy Reachable Assertion Vulnerability (CVE-2022-29228)

Python CVE-2019-16056 Vulnerability (CVE-2019-16056)

phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-36398)

PHP Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2014-3981)

OpenSSL Numeric Errors Vulnerability (CVE-2016-2181)

Severity

Medium

Classification

CVE-2011-1467

Tags

Missing Update Known Vulnerabilities