PT-2011-2337
CVE-2011-0420
·
تاريخ النشر
2011-02-18
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
PHP version 5.3.5
Description
The issue allows context-dependent attackers to cause a denial of service, resulting in a crash, by providing an invalid size argument to the
grapheme extract function in the Internationalization extension (Intl) for ICU. This invalid argument triggers a NULL pointer dereference.Recommendations
For PHP version 5.3.5, consider updating to a newer version that contains a fix for this issue to prevent potential denial of service attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾