This host is running PHP and is prone to NULL pointer dereference denial of service vulnerability.

Successful exploitation could allows context-dependent attackers to cause a denial of service. Impact Level: Network

Apply the patch http://svn.php.net/viewvc?view=revision&revision=306449 ***** NOTE: Ignore this warning, if above mentioned patch is already applied. *****

A flaw is caused by a NULL pointer dereference in the 'grapheme_extract()' function in the Internationalization extension (Intl) for ICU which allows context-dependent attackers to cause a denial of service via an invalid size argument.

PHP version 5.3.5

• http://securityreason.com/achievement_securityalert/94
• http://svn.php.net/viewvc/php/php-src/trunk/ext/intl/grapheme/grapheme_string.c?r1=306449&r2=306448&pathrev=306449
• http://www.exploit-db.com/exploits/16182
• http://xforce.iss.net/xforce/xfdb/65437

---

Updated on 2015-03-25