CVE-2012-0781

The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability than CVE-2011-4153.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

10.77% chance of exploitation in the next 30 days, 96th percentile

Published

2012-01-18

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/18370/

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18370

References

• CVE Record
• NVD entry

Related

• CVE-2012-0780
• CVE-2012-0782
• CVE-2012-0779
• CVE-2012-0785
• CVE-2012-0754
• CVE-2012-0787