Published: 19/02/2011 Updated: 10/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 510

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent malicious users to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.

Vulnerable Product	Search on Vulmon	Subscribe to Product
php php 5.3.5

Several vulnerabilities were discovered in PHP, which could lead to denial of service or potentially the execution of arbitrary code CVE-2010-2531 An information leak was found in the var_export() function CVE-2011-0421 The Zip module could crash CVE-2011-0708 An integer overflow was discovered in the Exif module CVE-2011-1466 An i ...

USN 1126-1 introduced two regressions in PHP ...

Multiple vulnerabilities in PHP ...

PHP version 525 suffers from a grapheme_extract() null pointer dereference vulnerability ...

Source: securityreasoncom/securityalert/8087 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [ PHP 535 grapheme_extract() NULL Pointer Dereference ] Author: Maksymilian Arciemowicz securityreasoncom/ cxibnet/ Date: - - Dis: 09122010 - - Pub: 17022011 CVE: CVE-2011-0420 CERT: VU#210829 Affected Software: - - PHP 5 ...

source: wwwsecurityfocuscom/bid/46429/info PHP is prone to a denial-of-service vulnerability caused by a NULL-pointer dereference An attacker can exploit this issue to cause an appliation written in PHP to crash, denying service to legitimate users PHP 535 is vulnerable; other versions may also be affected The following proof-of- ...

NVD-CWE-Other http://www.securityfocus.com/archive/1/516518/100/0/threaded http://svn.php.net/viewvc/php/php-src/trunk/ext/intl/grapheme/grapheme_string.c?r1=306449&r2=306448&pathrev=306449 http://securityreason.com/achievement_securityalert/94 http://www.securityfocus.com/bid/46429 http://www.kb.cert.org/vuls/id/210829 http://www.debian.org/security/2011/dsa-2266 http://securityreason.com/securityalert/8087 http://support.apple.com/kb/HT5002 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html http://www.exploit-db.com/exploits/16182 https://exchange.xforce.ibmcloud.com/vulnerabilities/65437 http://www.securityfocus.com/archive/1/516504/100/0/threaded https://nvd.nist.gov https://www.debian.org/security/./dsa-2266 https://usn.ubuntu.com/1126-2/https://www.exploit-db.com/exploits/16182/

CVE-2011-0420

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect