CVE-2012-0781

Publication date 18 January 2012

Last updated 24 July 2024

The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability than CVE-2011-4153.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
php5	12.04 LTS precise	Fixed 5.3.10-1ubuntu3.2
	11.10 oneiric	Fixed 5.3.6-13ubuntu3.8
	11.04 natty	Fixed 5.3.5-1ubuntu7.10
	10.10 maverick	Ignored end of life
	10.04 LTS lucid	Fixed 5.3.2-1ubuntu4.17
	8.04 LTS hardy	Fixed 5.2.4-2ubuntu5.25

Notes

sbeattie

upstream added a fix for this, but reverted it as it added a regression, and asserts it should be fixed in libtidy

mdeslaur

upstream finally fixed it in r323118

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
php5	Upstream: http://svn.php.net/viewvc?view=revision&revision=319254 Upstream: http://svn.php.net/viewvc?view=revision&revision=322536 Upstream: http://svn.php.net/viewvc?view=revision&revision=323118

CVE-2012-0781

Status

Notes

sbeattie

mdeslaur

Patch details

References

Related Ubuntu Security Notices (USN)

Other references