The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2011-006 | Aug 28, 2015 | Feb 18, 2011 |
| Apple Osx Php | — | Apply OS X security update 2011-006 | Dec 16, 2011 | Feb 18, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Feb 18, 2011 |
| Php | — | Upgrade to PHP version 5.3.6 | Oct 1, 2012 | Feb 18, 2011 |
| Suse | — | Upgrade php53-snmpUpgrade php8-mbstringUpgrade php8-zipUpgrade php8-exifUpgrade php53-calendarUpgrade php53-ctypeUpgrade php8-gdUpgrade php53-sysvsemUpgrade php53-tokenizerUpgrade php53-xslUpgrade php8-xslUpgrade php8-sysvshmUpgrade php8-shmopUpgrade php8-soapUpgrade php8-posixUpgrade php8-calendarUpgrade php8-sysvsemUpgrade php8-opensslUpgrade php7-ctypeUpgrade php8-intlUpgrade php8-xmlreaderUpgrade php8-bz2Upgrade php53-fileinfoUpgrade php53-develUpgrade php7-xmlwriterUpgrade php53-zlibUpgrade php8-sysvmsgUpgrade php8-ctypeUpgrade php8-pgsqlUpgrade php53-jsonUpgrade php5-develUpgrade php8-sodiumUpgrade php53-xmlrpcUpgrade php53-mcryptUpgrade php8-ffiUpgrade php8-snmpUpgrade php53-soapUpgrade php53-domUpgrade php8-bcmathUpgrade php7-jsonUpgrade php8-cliUpgrade php53-sqliteUpgrade php8-enchantUpgrade php8-opcacheUpgrade php53-ldapUpgrade php53-mysqlUpgrade php53-intlUpgrade php72-develUpgrade php53-mbstringUpgrade php53-pspellUpgrade php53-opensslUpgrade php7-iconvUpgrade php8-gettextUpgrade php53-gettextUpgrade php53-tidyUpgrade php53-zipUpgrade php8-pharUpgrade php8-pdoUpgrade php7-xmlreaderUpgrade php8-domUpgrade php53-pdoUpgrade php53-exifUpgrade php8-fileinfoUpgrade php8-iconvUpgrade php8-ldapUpgrade php8-sqliteUpgrade php8-zlibUpgrade php53-xmlreaderUpgrade php7-develUpgrade apache2-mod_php7Upgrade php53-imapUpgrade php53-ftpUpgrade php53-dbaUpgrade php53-shmopUpgrade php53-pearUpgrade php53Upgrade php7-pgsqlUpgrade php53-suhosinUpgrade php7-tokenizerUpgrade php8-gmpUpgrade php7-sqliteUpgrade php7-pdoUpgrade php8-tidyUpgrade php53-sysvmsgUpgrade php8-embedUpgrade php8-ftpUpgrade php8-socketsUpgrade php53-socketsUpgrade php8-fpm-apacheUpgrade php53-xmlwriterUpgrade php53-posixUpgrade php8-fastcgiUpgrade php8-xmlwriterUpgrade apache2-mod_php53Upgrade php8-tokenizerUpgrade php8-curlUpgrade php8-odbcUpgrade php53-readlineUpgrade php8-fpmUpgrade php8-mysqlUpgrade php53-pgsqlUpgrade php8-readlineUpgrade php53-gdUpgrade php53-pcntlUpgrade php53-odbcUpgrade php53-gmpUpgrade php7Upgrade php8-dbaUpgrade php53-bcmathUpgrade php8-pcntlUpgrade php8-develUpgrade php53-bz2Upgrade php53-wddxUpgrade php53-curlUpgrade php53-sysvshmUpgrade php7-domUpgrade apache2-mod_php8Upgrade php7-mysqlUpgrade php8Upgrade php53-iconvUpgrade php53-fastcgi | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-gdUpgrade php5-cgiUpgrade php5-intlUpgrade php5-commonUpgrade php5-curlUpgrade php5Upgrade php5-devUpgrade php5-cliUpgrade libapache2-mod-php5Upgrade php-pear | Nov 8, 2024 | Feb 19, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub