PT-2012-1219 · Perl+1 · Perl+2
Petr Pisar
+1
·
Publicado
2011-11-03
·
Atualizado
2023-02-13
·
CVE-2011-2939
CVSS v2.0
5.1
Média
| Vetor | AV:N/AC:H/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Encode module versions prior to 2.44
Perl versions prior to 5.15.6
Description
The issue is related to an off-by-one error in the decode xs function, which can lead to a denial of service due to memory corruption. This is caused by a heap-based buffer overflow when processing a crafted Unicode string. The vulnerability is associated with errors in number processing and can be exploited by a remote attacker to cause a denial of service.
Recommendations
For Encode module versions prior to 2.44, update to version 2.44 or later.
For Perl versions prior to 5.15.6, update to version 5.15.6 or later.
Exploit
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Encode
Perl
Red Hat