Back to search
CVE-2011-0420
Published: Feb 18, 2011
Modified: Aug 6, 2024
PUBLISHED
Description
The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20110216 PHP 5.3.5 grapheme_extract() NULL Pointer Dereference
mailing-list
x_refsource_BUGTRAQ
DSA-2266
vendor-advisory
x_refsource_DEBIAN
VU#210829
third-party-advisory
x_refsource_CERT-VN
46429
vdb-entry
x_refsource_BID
8087
third-party-advisory
x_refsource_SREASON
16182
exploit
x_refsource_EXPLOIT-DB
APPLE-SA-2011-10-12-3
vendor-advisory
x_refsource_APPLE
php-graphemeextract-dos(65437)
vdb-entry
x_refsource_XF
20110217 Re: PHP 5.3.5 grapheme_extract() NULL Pointer Dereference
mailing-list
x_refsource_BUGTRAQ
20110217 PHP 5.3.5 grapheme_extract() NULL Pointer Dereference
third-party-advisory
x_refsource_SREASONRES
http://support.apple.com/kb/HT5002
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now