Description

The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.

Remediation

References

CVE-2011-0420

Related Vulnerabilities

Perl Out-of-bounds Write Vulnerability (CVE-2018-18311)

Moodle Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2012-1160)

Java Unspesificed Vulnerability (CVE-2018-3183)

Varnish Cache Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-8807)

Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7062)

Severity

Medium

Classification

CVE-2011-0420

Tags

Missing Update Known Vulnerabilities