The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Apply OS X security update 2011-006Upgrade macOS to the latest version | Aug 28, 2015 | Feb 18, 2011 |
| Apple Osx Php | — | Apply OS X security update 2011-006 | Dec 16, 2011 | Feb 18, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Feb 18, 2011 |
| Php | — | Upgrade to PHP version 5.3.6 | Oct 1, 2012 | Feb 18, 2011 |
| Suse | — | Upgrade php7-pgsqlUpgrade php8-xmlwriterUpgrade php8-tokenizerUpgrade php8-zlibUpgrade php7-develUpgrade php53-gmpUpgrade php8-fpm-apacheUpgrade php8-mysqlUpgrade php53Upgrade php53-zipUpgrade php53-calendarUpgrade php53-sqliteUpgrade php53-snmpUpgrade php8-calendarUpgrade php8-opensslUpgrade php53-mysqlUpgrade php8-xslUpgrade php8-soapUpgrade php8-mbstringUpgrade php8-enchantUpgrade php53-tokenizerUpgrade php5-develUpgrade php53-xmlrpcUpgrade php8-sysvshmUpgrade php53-jsonUpgrade php7-jsonUpgrade php8-ffiUpgrade php53-xslUpgrade php7-xmlwriterUpgrade php53-ctypeUpgrade php72-develUpgrade php8-sodiumUpgrade php8-xmlreaderUpgrade php8-snmpUpgrade php8-bcmathUpgrade php53-sysvsemUpgrade php8-intlUpgrade php8-opcacheUpgrade php53-ldapUpgrade php8-gdUpgrade php8-shmopUpgrade php53-domUpgrade php53-soapUpgrade php8-cliUpgrade php8-exifUpgrade php7-ctypeUpgrade php53-mcryptUpgrade php53-develUpgrade php8-ctypeUpgrade php8-pgsqlUpgrade php8-zipUpgrade php8-posixUpgrade php53-zlibUpgrade php8-sysvsemUpgrade php8-sysvmsgUpgrade php8-bz2Upgrade php53-fileinfoUpgrade php53-intlUpgrade php8-gmpUpgrade php8-gettextUpgrade php8-fpmUpgrade php7-sqliteUpgrade php8-develUpgrade php53-bcmathUpgrade php53-opensslUpgrade php53-mbstringUpgrade php8-iconvUpgrade php53-exifUpgrade php53-pearUpgrade php7-iconvUpgrade php53-curlUpgrade php53-pspellUpgrade php53-imapUpgrade php53-gdUpgrade php7-pdoUpgrade php8-readlineUpgrade php53-xmlwriterUpgrade php53-pgsqlUpgrade php8-domUpgrade php53-bz2Upgrade php53-socketsUpgrade php8-ldapUpgrade php8-fileinfoUpgrade php53-pcntlUpgrade php53-odbcUpgrade php53-readlineUpgrade apache2-mod_php8Upgrade php8-curlUpgrade php8-fastcgiUpgrade php8-pharUpgrade php53-tidyUpgrade php53-suhosinUpgrade php8-pdoUpgrade php7-domUpgrade php53-sysvshmUpgrade php53-posixUpgrade php53-dbaUpgrade php7Upgrade php53-xmlreaderUpgrade apache2-mod_php53Upgrade php8-pcntlUpgrade php53-iconvUpgrade php53-fastcgiUpgrade php8-dbaUpgrade php53-gettextUpgrade php53-ftpUpgrade apache2-mod_php7Upgrade php8Upgrade php53-wddxUpgrade php8-ftpUpgrade php53-sysvmsgUpgrade php8-embedUpgrade php53-pdoUpgrade php8-socketsUpgrade php7-mysqlUpgrade php8-sqliteUpgrade php53-shmopUpgrade php7-tokenizerUpgrade php8-tidyUpgrade php8-odbcUpgrade php7-xmlreader | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-cliUpgrade php5-devUpgrade libapache2-mod-php5Upgrade php-pearUpgrade php5-intlUpgrade php5Upgrade php5-gdUpgrade php5-curlUpgrade php5-commonUpgrade php5-cgi | Nov 8, 2024 | Feb 19, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub