39 matches found
CVE-2015-8616
Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collatorsort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact by leveraging the relationships between a key buffer...
CVE-2015-8616
Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collatorsort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact by leveraging the relationships between a key buffer...
CVE-2015-8616
CVE-2015-8616 is a use-after-free vulnerability in PHP 7.x before 7.0.1 affecting the Collator::sortWithSortKeys implementation (ext/intl/collator/collator_sort.c). The underlying issue is a use-after-free triggered by the relationship between a key buffer and a destroyed array, allowing a remote...
CVE-2015-8616
Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collatorsort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact by leveraging the relationships between a key buffer...
KLA10746 Multiple vulnerabilities in PHP
Multiple serious vulnerabilities have been found in PHP. Malicious users can exploit these vulnerabilities to cause denial of service, affect arbitrary files, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Multiple integer overflows can be...
PT-2016-1131
Name of the Vulnerable Software and Affected Versions PHP versions prior to 7.0.1 Description The issue is related to a use-after-free vulnerability in the Collator::sortWithSortKeys function. This vulnerability can be exploited by remote attackers to cause a denial of service, resulting in an...
Internet Bug Bounty: Use After Free in sortWithSortKeys()
Copy Paste of bug report at https://bugs.php.net/bug.php?id=71020 Issue verified and fixed. Description: ------------ This is a vulnerability is in the function Collator::sortWithSortKeys. The vulnerable code is in ext/intl/collator/collatorsort.c 1 Given an array, each element hashData is being...
PHP Intl extension suffers from a denial of service vulnerability
The Intl Internationalization Extension is a new extension for PHP 5.3, a wrapper for the ICU library, which provides assistance in internationalizing applications. A memory misreference denial of service vulnerability exists in the 'intl/collator/collatorsort.c' file in PHP Intl. An attacker can...
USN-2522-3: ICU vulnerabilities
USN-2522-1 fixed vulnerabilities in ICU. On Ubuntu 12.04 LTS, the font patches caused a regression when using LibreOffice Calc. The patches have now been updated to fix the regression. We apologize for the inconvenience. Original advisory details: It was discovered that ICU incorrectly handled...
Ubuntu 14.04 LTS : ICU vulnerabilities (USN-2522-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2522-1 advisory. It was discovered that ICU incorrectly handled memory operations when processing fonts. If an application using ICU processed crafted data, an attacker...
USN-2522-1: ICU vulnerabilities
It was discovered that ICU incorrectly handled memory operations when processing fonts. If an application using ICU processed crafted data, an attacker could cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubun...
Updated icu packages fix security vulnerabilities
Updated icu packages fix security vulnerabilities: The Regular Expressions package in International Components for Unicode ICU 52 before SVN revision 292944 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via vectors related to a...
ICU: uninitialized value use in the collation component
The collator implementation in i18n/ucol.cpp in International Components for Unicode ICU 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have...
CVE-2014-7940
The collator implementation in i18n/ucol.cpp in International Components for Unicode ICU 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have...
Information disclosure
The collator implementation in i18n/ucol.cpp in International Components for Unicode ICU 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have...
CVE-2014-7940
The collator implementation in i18n/ucol.cpp in International Components for Unicode ICU 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have...
CVE-2014-7940
The collator implementation in i18n/ucol.cpp in International Components for Unicode ICU 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have...
UBUNTU-CVE-2014-7940
The collator implementation in i18n/ucol.cpp in International Components for Unicode ICU 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have...
PT-2015-3267
Name of the Vulnerable Software and Affected Versions International Components for Unicode ICU versions 52 through SVN revision 293126 Google Chrome versions prior to 40.0.2214.91 Description The issue is related to the collator implementation in the International Components for Unicode ICU...