Description

The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.

Remediation

References

CVE-2011-0420

Related Vulnerabilities

WordPress Plugin Snazzy Maps Cross-Site Request Forgery (1.1.5)

WordPress Plugin GA Backend Tracking Cross-Site Scripting (1.2)

WordPress Plugin Thrive Ovation Security Bypass (2.4.4)

Oracle Database Server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-2111)

WordPress Plugin Minimal Coming Soon & Maintenance Mode-Coming Soon Page Open Redirect (1.85)

Severity

Medium

Classification

CVE-2011-0420

Tags

Missing Update Known Vulnerabilities