The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability than CVE-2011-4153.
References
Configurations
Information
Published : 2012-01-18 12:55
Updated : 2018-01-08 18:29
NVD link : CVE-2012-0781
Mitre link : CVE-2012-0781
JSON object : View
CWE
CWE-399
Resource Management Errors
Products Affected
php
- php