Description
Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument.
Remediation
References
Related Vulnerabilities
Joomla! Core 3.9.x Cross-Site Scripting (3.9.0 - 3.9.20)
WordPress Plugin LinkedIn by BestWebSoft Cross-Site Scripting (1.0.4)
WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (7.5.2.727)
Plone CMS URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-1000481)
LimeSurvey Deserialization of Untrusted Data Vulnerability (CVE-2025-56422)