php: zend_strndup() NULL pointer dereference may cause DoS

PHP 5.3.8 does not always check the return value of the zendstrndup function, which might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that performs strndup operations on untrusted string data, as demonstrat...

PT-2012-1814

Name of the Vulnerable Software and Affected Versions PHP version 5.3.8 Description The issue is related to the zend strndup function not always checking its return value, potentially allowing remote attackers to cause a denial of service through a NULL pointer dereference and application crash...