bugtraq - Re: PHP 5.3.5 grapheme_extract() NULL Pointer Dereference

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <4D5D600B.5020701@wfmh.org.pl>
Date: Thu, 17 Feb 2011 18:51:07 +0100
From: Marcin Orlowski <carlos@...h.org.pl>
To: bugtraq@...urityfocus.com
Subject: Re: PHP 5.3.5 grapheme_extract() NULL Pointer Dereference

On Wed, 16 Feb 2011 16:11:23 -0700 cxib wrote:

> Affected Software:
> - PHP 5.3.5

grapheme is neither part of PHP core, nor built-in PHP extension,
therefore above is false as bug is not in PHP itself. People
using PHP 5.3.5 but not using grapheme (some distros like Debian
and derrivatives offer this extension under name "php5-intl")
are not vulnerable.

Regards,
-- 
"Daddy, what "Formatting drive C:" means?"...

Marcin             http://wfmh.org.pl/carlos/