PHP versions 5.2.4 and below are susceptible to a denial of service condition in iconv_substr().
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/59100/php524-iconv.txt
Source: https://packetstormsecurity.com/files/59100/php524-iconv.txt.html