Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Apply OS X security update 2011-004Upgrade macOS to the latest versionApply OS X security update 2011-001 | Aug 28, 2015 | Dec 6, 2010 |
| Apple Osx Php | — | Upgrade macOS to the latest version | Dec 16, 2011 | Dec 6, 2010 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Dec 6, 2010 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Dec 6, 2010 |
| Php | — | Upgrade to PHP version 5.3.4 | Oct 1, 2012 | Dec 6, 2010 |
| Suse | — | Upgrade libicu-devel-32bitUpgrade libicu-devel-64bitUpgrade libicu-debuginfo-32bitUpgrade icuUpgrade icu-dataUpgrade libicu-x86Upgrade libicu-32bitUpgrade libicu-debuginfoUpgrade libicu-64bitUpgrade libicuUpgrade icu-debugsourceUpgrade libicu-docUpgrade icu-debuginfoUpgrade libicu-devel | Dec 12, 2013 | Dec 6, 2010 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php5-cgiUpgrade php5-cli | Nov 8, 2024 | Dec 6, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub