Description
The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.
Remediation
References
Related Vulnerabilities
WordPress Plugin Copy or Move Comments Multiple Vulnerabilities (1.0.0)
WordPress Plugin NextGEN Gallery-WordPress Gallery Local File Inclusion (2.1.56)
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-7859)
Django Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-6188)