- --- 0.Description ---
Internationalization extension (further is referred as Intl) is a wrapper
for ICU library, enabling PHP programmers to perform UCA-conformant
collation and date/time/number/currency formatting in their scripts.
grapheme_extract — Function to extract a sequence of default grapheme
clusters from a text buffer, which must be encoded in UTF-8.
- --- 3. Fix ---
The grapheme_extract function in the Internationalization extension (Intl)
for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial
of service (crash) via an invalid size argument, which triggers a NULL
This issue was resolved and addressed in
GLSA 201110-06 at http://security.gentoo.org/glsa/glsa-201110-06.xml
by GLSA coordinator Tobias Heinlein (keytoaster).