Test ID:	1.3.6.1.4.1.25623.1.0.801860
Category:	Denial of Service
Title:	PHP 'grapheme_extract()' NULL Pointer Dereference Denial Of Service Vulnerability
Summary:	PHP is prone to a NULL pointer dereference denial of service vulnerability.
Description:	Summary: PHP is prone to a NULL pointer dereference denial of service vulnerability. Vulnerability Insight: A flaw is caused by a NULL pointer dereference in the 'grapheme_extract()' function in the Internationalization extension (Intl) for ICU which allows context-dependent attackers to cause a denial of service via an invalid size argument. Vulnerability Impact: Successful exploitation could allows context-dependent attackers to cause a denial of service. Affected Software/OS: PHP version 5.3.5. Solution: Apply the patch the referenced advisory. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	BugTraq ID: 46429 Common Vulnerability Exposure (CVE) ID: CVE-2011-0420 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html http://www.securityfocus.com/bid/46429 Bugtraq: 20110216 PHP 5.3.5 grapheme_extract() NULL Pointer Dereference (Google Search) http://www.securityfocus.com/archive/1/516504/100/0/threaded Bugtraq: 20110217 Re: PHP 5.3.5 grapheme_extract() NULL Pointer Dereference (Google Search) http://www.securityfocus.com/archive/1/516518/100/0/threaded CERT/CC vulnerability note: VU#210829 http://www.kb.cert.org/vuls/id/210829 Debian Security Information: DSA-2266 (Google Search) http://www.debian.org/security/2011/dsa-2266 http://www.exploit-db.com/exploits/16182 http://svn.php.net/viewvc/php/php-src/trunk/ext/intl/grapheme/grapheme_string.c?r1=306449&r2=306448&pathrev=306449 http://securityreason.com/securityalert/8087 http://securityreason.com/achievement_securityalert/94 XForce ISS Database: php-graphemeextract-dos(65437) https://exchange.xforce.ibmcloud.com/vulnerabilities/65437
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.