CVE-2011-0420

Name of the Vulnerable Software and Affected Versions PHP version 5.3.5

Description The issue allows context-dependent attackers to cause a denial of service, resulting in a crash, by providing an invalid size argument to the grapheme extract function in the Internationalization extension (Intl) for ICU. This invalid argument triggers a NULL pointer dereference.

Recommendations For PHP version 5.3.5, consider updating to a newer version that contains a fix for this issue to prevent potential denial of service attacks.