CVE-2011-0420

CVE-2011-0420 describes a denial-of-service vulnerability in PHP 5.3.5, specifically within the grapheme_extract function of the Internationalization (Intl) extension. An attacker can trigger a NULL pointer dereference by providing an invalid size argument, leading to a system crash. With a CVSS score of 5.0, this vulnerability is easily exploitable over the network with low attack complexity, resulting in a partial availability impact. While not actively exploited in the wild, public exploit code for this specific issue is available on ExploitDB, though there is minimal community discussion or media coverage.