PHP 'grapheme_extract()' NULL Pointer Dereference Denial Of Service Vulnerability
BID:46429
Info
PHP 'grapheme_extract()' NULL Pointer Dereference Denial Of Service Vulnerability
| Bugtraq ID: | 46429 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2011-0420 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 17 2011 12:00AM |
| Updated: | Jul 01 2011 11:30PM |
| Credit: | Maksymilian Arciemowicz |
| Vulnerable: |
Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 ARM Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 PHP PHP 5.3.5 PHP PHP 5.3.5 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Debian Linux 6.0 amd64 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 |
| Not Vulnerable: | |
Discussion
PHP 'grapheme_extract()' NULL Pointer Dereference Denial Of Service Vulnerability
PHP is prone to a denial-of-service vulnerability caused by a NULL-pointer dereference.
An attacker can exploit this issue to cause an appliation written in PHP to crash, denying service to legitimate users.
PHP 5.3.5 is vulnerable; other versions may also be affected.
PHP is prone to a denial-of-service vulnerability caused by a NULL-pointer dereference.
An attacker can exploit this issue to cause an appliation written in PHP to crash, denying service to legitimate users.
PHP 5.3.5 is vulnerable; other versions may also be affected.
Exploit / POC
PHP 'grapheme_extract()' NULL Pointer Dereference Denial Of Service Vulnerability
An attacker can use readily available tools to exploit this issue.
The following proof-of-concept is available:
grapheme_extract('a',-1);
An attacker can use readily available tools to exploit this issue.
The following proof-of-concept is available:
grapheme_extract('a',-1);
Solution / Fix
PHP 'grapheme_extract()' NULL Pointer Dereference Denial Of Service Vulnerability
Solution:
Updates are available. Please see the references for more information.
Apple Mac Os X Server 10.6.8
Solution:
Updates are available. Please see the references for more information.
Apple Mac Os X Server 10.6.8
-
Apple SecUpdSrvr2011-006.dmg
http://www.apple.com/support/downloads/
References
PHP 'grapheme_extract()' NULL Pointer Dereference Denial Of Service Vulnerability
References:
References:
- Fixed grapheme_extract() source file (PHP)
- PHP grapheme_extract() NULL Pointer Dereference (Maksymilian Arciemowicz)
- PHP Homepage (PHP)