11 matches found
SUSE CVE-2010-4409
Integer overflow in the NumberFormatter::getSymbol aka numfmtgetsymbol function in PHP 5.3.3 and earlier allows context-dependent attackers to cause a denial of service application crash via an invalid argument...
PHP 5.3.3 NumberFormatter::getSymbol Integer Overflow
No description provided by source. From: Maksymilian Arciemowicz cxib securityreason com Date: Fri, 10 Dec 2010 14:43:32 +0100 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.3.3 NumberFormatter::getSymbol Integer Overflow Author: Maksymilian Arciemowicz http://securityreason.com/...
SuSE 10 Security Update : icu (ZYPP Patch Number 7928)
The following bug has been fixed : - An integer overflow in the getSymbol function could crash applications using icu. CVE-2010-4409 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
PHP <5.3.3 NumberFormatter::getSymbol函数整数溢出漏洞
No description provided by source...
PHP integer overflow
NumberFormatter::getSymbol integer overflow...
PHP 5.3.3 - NumberFormatter::getSymbol Integer Overflow
PHP 5.3.3 - NumberFormatter::getSymbol Integer Overflow From: Maksymilian Arciemowicz Date: Fri, 10 Dec 2010 14:43:32 +0100 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.3.3 NumberFormatter::getSymbol Integer Overflow Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.ne...
PHP 5.3.3 Integer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.3.3 NumberFormatter::getSymbol Integer Overflow Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - - Dis.: 11.11.2010 - - Pub.: 10.12.2010 CERT: VU479900 CVE: CVE-2010-4409 CWE: CWE-189 Status: Fixed in PHP 5.3.4...
PHP "getSymbol()"函数拒绝服务漏洞
BUGTRAQ ID: 45119 PHP是广泛使用的通用目的脚本语言,特别适合于Web开发,可嵌入到HTML中。 PHP实现上存在漏洞,攻击者可利用此漏洞造成应用程序崩溃,拒绝服务攻击或执行任意代码。 PHP 5.3.2 - 5.3.3 厂商补丁: PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.php.net...
Integer overflow
Integer overflow in the NumberFormatter::getSymbol aka numfmtgetsymbol function in PHP 5.3.3 and earlier allows context-dependent attackers to cause a denial of service application crash via an invalid argument...
CVE-2010-4409
CVE-2010-4409 is described in connected sources as an integer overflow in PHP’s NumberFormatter::getSymbol (numfmt_get_symbol) within the Intl extension, due to the icu code path. Affected products are PHP 5.3.3 and earlier; impact is a denial-of-service via application crash. Some OpenVAS entrie...
PHP getSymbol vulnerability allows denial of service
Overview PHP fails to properly sanitize input passed to the getSymbol function in a way that could allow and attacker to cause a segmentation fault. Description PHP is a scripting language that is designed for web-based applications and can be embedded directly into HTML. The getSymbol function i...