Denial of service vulnerability in PHP

Beschreibung

An unspecified vulnerability was found in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14. By exploiting this vulnerability malicious users can cause a denial of service. Other unspecified impacts are also possible. This vulnerability can be exploited remotely via a locale_get_display_name call with a long first argument.

---

Technical details

This vulnerability occurs in the get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c.

Ursprüngliche Informationshinweise

• PHP Bugs

CVE Liste

• CVE-2014-9912
  critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com