CVE-2012-0781

CVE-2012-0781 describes a denial-of-service vulnerability in PHP 5.3.8, specifically within the tidy_diagnose function. Remote attackers can trigger a NULL pointer dereference and application crash by providing crafted input to applications attempting Tidy::diagnose operations on invalid objects. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P), this vulnerability is remotely exploitable with low attack complexity, leading to a denial of service. While an ExploitDB entry exists (EDB-18370) mentioning multiple PHP 5.3.8 vulnerabilities, there is no indication of active exploitation, Metasploit modules, or significant community discussion surrounding this specific CVE.