CVE-2011-0420
PHP 5.3.5 - Denial of Service via Invalid Size Argument in grapheme_extract
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-0420. PoCs published by Maksymilian Arciemowicz.
AI-analyzed exploit summary This exploit triggers a NULL-pointer dereference in PHP's grapheme_extract function, causing a denial-of-service (DoS) condition. The PoC is a single function call with invalid parameters, demonstrating the vulnerability.
Description
The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.
Exploits (2)
This exploit triggers a NULL-pointer dereference in PHP's grapheme_extract function, causing a denial-of-service (DoS) condition. The PoC is a single function call with invalid parameters, demonstrating the vulnerability.
This exploit demonstrates a NULL pointer dereference vulnerability in PHP 5.3.5's grapheme_extract() function when called with a negative size parameter, leading to a crash. The PoC shows how manipulating the input string length can control the RIP register during the crash.