CVE-2011-1467

php: NumberFormatter: set a symbol value crash (DoS) on bogus values

Published Mar 20, 2011 CVSS 2.0 · 5.0 Medium EPSS 12.7% KEV · Not listed
Description
Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-4409.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2408-1 php5 security update
Ubuntu USN Ubuntu USN USN-1126-1 PHP vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 10:28 PM
Reserved
Mar 19, 2011, 12:00 AM
Status
Modified
Published
Mar 20, 2011, 2:00 AM
Modified
Jun 16, 2026, 11:29 PM
Severity
Public date
Dec 7, 2010, 12:00 AM