Description

The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability than CVE-2011-4153.

Remediation

References

CVE-2012-0781

Related Vulnerabilities

Oracle JRE CVE-2013-2458 Vulnerability (CVE-2013-2458)

SugarCRM Improper Input Validation Vulnerability (CVE-2017-14509)

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4025)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2006-6832)

Oracle JRE CVE-2013-0419 Vulnerability (CVE-2013-0419)

Severity

Medium

Classification

CVE-2012-0781

Tags

Missing Update Known Vulnerabilities