Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Upgrade macOS to the latest versionApply OS X security update 2011-001Apply OS X security update 2011-004 | Aug 28, 2015 | Dec 6, 2010 |
| Apple Osx Php | — | Upgrade macOS to the latest version | Dec 16, 2011 | Dec 6, 2010 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Dec 6, 2010 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Dec 6, 2010 |
| Php | — | Upgrade to PHP version 5.3.4 | Oct 1, 2012 | Dec 6, 2010 |
| Suse | — | Upgrade icuUpgrade libicu-devel-32bitUpgrade libicu-x86Upgrade libicuUpgrade libicu-docUpgrade libicu-develUpgrade libicu-32bit | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php5-cgiUpgrade php5-cli | Nov 8, 2024 | Dec 6, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub