Lucene search
RootSSV:20395HistoryMar 27, 2011 - 12:00 a.m.
PHP "Intl"扩展"NumberFormatter::setSymbol()"函数拒绝服务漏洞
2011-03-2700:00:00
Root
www.seebug.org
53
0.015 Low
EPSS
Percentile
85.3%
BUGTRAQ ID: 46968
CVE ID: CVE-2011-1467
PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。
PHP "Intl"扩展"NumberFormatter::setSymbol()"函数在实现上存在拒绝服务漏洞，远程攻击者可利用此漏洞造成应用程序崩溃，拒绝服务和任意代码执行。
MandrakeSoft Corporate Server 4.0 x86_64
MandrakeSoft Corporate Server 4.0
PHP PHP 5.x
厂商补丁：
PHP
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
numfmt_set_symbol(numfmt_create("en", NumberFormatter::PATTERN_DECIMAL), 2147483648, "")
Related
ubuntucve
ubuntucve
CVE-2011-1467
2011-03-19 00:00:00
cve
cve
CVE-2011-1467
2011-03-20 02:00:00
prion
prion
Design/Logic Flaw
2011-03-20 02:00:00
nessus
nessus
SuSE 10 Security Update : PHP5 (ZYPP Patch Number 7553)
2011-12-13 00:00:00
openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2011:0645-1)
2014-06-13 00:00:00
openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2011:0645-1)
2014-06-13 00:00:00
openvas
openvas
PHP Version 5.3 < 5.3.6 Multiple Vulnerabilities
2012-06-14 00:00:00
Mandriva Update for php MDVSA-2011:052 (php)
2011-03-25 00:00:00
Mandriva Update for php MDVSA-2011:052 (php)
2011-03-25 00:00:00
debian
debian
[SECURITY] [DSA 2408-1] php5 security update
2012-02-13 18:15:24
osv
osv
php5 - several
2012-02-13 00:00:00
securityvulns
securityvulns
PHP multiple security vulnerabilities
2011-05-01 00:00:00
[USN-1126-1] PHP vulnerabilities
2011-05-01 00:00:00
[ GLSA 201110-06 ] PHP: Multiple vulnerabilities
2011-10-12 00:00:00
ubuntu
ubuntu
PHP Regressions
2011-05-05 00:00:00
PHP vulnerabilities
2011-04-29 00:00:00
f5
f5
Multiple PHP vulnerabilities
2012-04-05 02:07:00
SOL13518 - Multiple PHP vulnerabilities
2012-04-04 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2011-10-10 00:00:00