Sploitus

CVE-2011-0420

5 known exploits for CVE-2011-0420

The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.

Affected products
Icu, Php
Php
= 5.3.5
Fix
Available
CVSS 2.0
5.0 MEDIUM
EPSS
14.4% (96th percentile)
NVD status
Modified
Published
2011-02-18
CVE-2011-0420 at NVD
Authoritative description, scoring and affected products

5 known exploits for CVE-2011-0420

Proof-of-concept code and exploit modules indexed by Sploitus

PHP 5.3.5 grapheme_extract() NULL Pointer Dereference
2011-02-18 MaksymilianZDT
PHP 5.3.5 - grapheme_extract() Null Pointer Dereference
2011-02-17 Maksymilian ArciemowiczEXPLOITPACK
PHP 5.3.5 - 'grapheme_extract()' Null Pointer Dereference
2011-02-17 Maksymilian ArciemowiczEXPLOITDB
PHP 5.3.5 - 'grapheme_extract()' Null Pointer Dereference Denial of Service
2011-02-17 Maksymilian ArciemowiczEXPLOITDB
PHP 5.2.5 grapheme_extract() NULL Pointer Dereference
2011-02-16 Maksymilian ArciemowiczPACKETSTORM