CVE-2010-4409

Name of the Vulnerable Software and Affected Versions PHP versions 5.3.3 and earlier

Description The issue is related to an integer overflow in the NumberFormatter::getSymbol (also known as numfmt get symbol) function. This allows context-dependent attackers to cause a denial of service, resulting in an application crash, by providing an invalid argument.

Recommendations For PHP versions 5.3.3 and earlier, consider upgrading to a version where this issue is fixed, as using an invalid argument in the NumberFormatter::getSymbol function can lead to a denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.