The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2011-006 | Aug 28, 2015 | Feb 18, 2011 |
| Apple Osx Php | — | Apply OS X security update 2011-006 | Dec 16, 2011 | Feb 18, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Feb 18, 2011 |
| Php | — | Upgrade to PHP version 5.3.6 | Oct 1, 2012 | Feb 18, 2011 |
| Suse | — | Upgrade php8-xslUpgrade php8-exifUpgrade php53-soapUpgrade php53-intlUpgrade php53-fileinfoUpgrade php53-develUpgrade php8-opensslUpgrade php8-gdUpgrade php8-snmpUpgrade php8-xmlreaderUpgrade php53-sysvsemUpgrade php53-zlibUpgrade php8-bcmathUpgrade php8-ctypeUpgrade php7-ctypeUpgrade php53-mcryptUpgrade php53-domUpgrade php53-sqliteUpgrade php8-sodiumUpgrade php8-zipUpgrade php8-sysvsemUpgrade php8-intlUpgrade php53-calendarUpgrade php53-tokenizerUpgrade php8-mbstringUpgrade php8-enchantUpgrade php53-mysqlUpgrade php72-develUpgrade php8-opcacheUpgrade php53-xmlrpcUpgrade php53-ldapUpgrade php8-pgsqlUpgrade php7-jsonUpgrade php8-sysvmsgUpgrade php53-snmpUpgrade php8-ffiUpgrade php8-cliUpgrade php5-develUpgrade php53-xslUpgrade php8-sysvshmUpgrade php53-ctypeUpgrade php8-soapUpgrade php8-bz2Upgrade php8-calendarUpgrade php8-shmopUpgrade php7-xmlwriterUpgrade php53-jsonUpgrade php8-posixUpgrade php8-ldapUpgrade php8-zlibUpgrade php8-odbcUpgrade apache2-mod_php8Upgrade php53-mbstringUpgrade php8-xmlwriterUpgrade php8-tokenizerUpgrade php7-iconvUpgrade apache2-mod_php53Upgrade php53-iconvUpgrade php7-domUpgrade php53-fastcgiUpgrade php53-bz2Upgrade php53-sysvmsgUpgrade php8-develUpgrade php53-gdUpgrade php53-readlineUpgrade php7Upgrade php53-exifUpgrade php8-readlineUpgrade php7-pdoUpgrade php53-bcmathUpgrade php53-suhosinUpgrade php8-gettextUpgrade php53-curlUpgrade php8-tidyUpgrade php53-imapUpgrade php53-ftpUpgrade php7-pgsqlUpgrade php53-xmlreaderUpgrade php53-shmopUpgrade php53-dbaUpgrade php53-wddxUpgrade php7-develUpgrade php53Upgrade php53-socketsUpgrade php8-gmpUpgrade php8-fileinfoUpgrade php53-odbcUpgrade php53-gettextUpgrade php53-pspellUpgrade php53-pgsqlUpgrade php8Upgrade php53-pdoUpgrade php53-opensslUpgrade php8-fpmUpgrade php8-socketsUpgrade php53-sysvshmUpgrade php7-sqliteUpgrade apache2-mod_php7Upgrade php8-dbaUpgrade php8-mysqlUpgrade php8-pcntlUpgrade php53-pcntlUpgrade php53-pearUpgrade php7-xmlreaderUpgrade php8-curlUpgrade php8-fpm-apacheUpgrade php53-posixUpgrade php8-pdoUpgrade php53-xmlwriterUpgrade php7-mysqlUpgrade php7-tokenizerUpgrade php8-iconvUpgrade php8-sqliteUpgrade php8-fastcgiUpgrade php8-domUpgrade php53-tidyUpgrade php8-pharUpgrade php8-embedUpgrade php8-ftpUpgrade php53-zipUpgrade php53-gmp | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-gdUpgrade php5-cgiUpgrade php5-intlUpgrade php5-curlUpgrade php5-commonUpgrade php5Upgrade libapache2-mod-php5Upgrade php-pearUpgrade php5-devUpgrade php5-cli | Nov 8, 2024 | Feb 19, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub