The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Apply OS X security update 2011-006Upgrade macOS to the latest version | Aug 28, 2015 | Feb 18, 2011 |
| Apple Osx Php | — | Apply OS X security update 2011-006 | Dec 16, 2011 | Feb 18, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Feb 18, 2011 |
| Php | — | Upgrade to PHP version 5.3.6 | Oct 1, 2012 | Feb 18, 2011 |
| Suse | — | Upgrade php8-fpmUpgrade php8-readlineUpgrade php53-odbcUpgrade php53-shmopUpgrade php53-gdUpgrade php53-dbaUpgrade php8-odbcUpgrade php53-sysvshmUpgrade php53-fastcgiUpgrade php53-imapUpgrade php8Upgrade php8-sqliteUpgrade php7-pdoUpgrade php53-posixUpgrade php8-embedUpgrade php7-domUpgrade php53-tidyUpgrade php53-zipUpgrade php8-gmpUpgrade php7-mysqlUpgrade php8-fastcgiUpgrade php53-pdoUpgrade php8-iconvUpgrade php8-curlUpgrade php53-sysvmsgUpgrade php7-xmlreaderUpgrade php53-pearUpgrade php8-domUpgrade php8-ldapUpgrade php53-ftpUpgrade php53-readlineUpgrade php7-iconvUpgrade php53-iconvUpgrade apache2-mod_php7Upgrade php8-develUpgrade php53-bcmathUpgrade php53-socketsUpgrade php53-pcntlUpgrade php7-sqliteUpgrade php8-pcntlUpgrade php8-ftpUpgrade php8-fpm-apacheUpgrade php8-fileinfoUpgrade php53Upgrade php53-xmlwriterUpgrade php8-pdoUpgrade php8-xmlwriterUpgrade php8-pharUpgrade php8-tokenizerUpgrade php7Upgrade php8-dbaUpgrade php53-gmpUpgrade php53-bz2Upgrade php53-exifUpgrade apache2-mod_php53Upgrade php7-pgsqlUpgrade apache2-mod_php8Upgrade php53-mbstringUpgrade php8-gettextUpgrade php53-curlUpgrade php53-pspellUpgrade php8-mysqlUpgrade php53-gettextUpgrade php7-tokenizerUpgrade php8-zlibUpgrade php53-suhosinUpgrade php7-develUpgrade php53-opensslUpgrade php53-pgsqlUpgrade php8-tidyUpgrade php53-wddxUpgrade php53-xmlreaderUpgrade php8-socketsUpgrade php8-enchantUpgrade php53-fileinfoUpgrade php8-bcmathUpgrade php8-sysvmsgUpgrade php53-develUpgrade php53-sysvsemUpgrade php8-pgsqlUpgrade php7-jsonUpgrade php53-xmlrpcUpgrade php53-jsonUpgrade php8-soapUpgrade php7-xmlwriterUpgrade php53-ctypeUpgrade php53-domUpgrade php8-shmopUpgrade php8-posixUpgrade php8-intlUpgrade php8-xmlreaderUpgrade php8-sodiumUpgrade php53-snmpUpgrade php72-develUpgrade php5-develUpgrade php53-xslUpgrade php8-bz2Upgrade php8-zipUpgrade php8-cliUpgrade php8-opcacheUpgrade php8-sysvsemUpgrade php8-opensslUpgrade php8-exifUpgrade php53-calendarUpgrade php53-mysqlUpgrade php53-ldapUpgrade php53-tokenizerUpgrade php53-soapUpgrade php8-sysvshmUpgrade php7-ctypeUpgrade php8-ffiUpgrade php8-gdUpgrade php53-zlibUpgrade php8-ctypeUpgrade php8-calendarUpgrade php53-mcryptUpgrade php53-intlUpgrade php8-snmpUpgrade php8-xslUpgrade php8-mbstringUpgrade php53-sqlite | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php5-cliUpgrade php-pearUpgrade php5-devUpgrade php5-curlUpgrade php5-commonUpgrade php5-intlUpgrade php5-cgiUpgrade php5-gdUpgrade php5 | Nov 8, 2024 | Feb 19, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub