PT-2019-6734 · Mediawiki · Mwlib

Vincent Danen · Publicado 2019-11-12 · Atualizado 2019-11-14 · CVE-2012-1109

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions mwlib versions 0.13 through 0.13.4

Description The issue is related to a denial of service vulnerability that occurs when parsing #iferror magic functions.

Recommendations For mwlib versions 0.13 through 0.13.4, update to a version that contains a fix for this issue.

Correção

Improper Handling of Exceptional Conditions

Enumeração de Fraquezas

CWE-755

Identificadores relacionados

CVE-2012-1109

Produtos afetados

Mwlib

Referências · 4

• http://openwall.com/lists/oss-security/2012/03/05/20 · Correção
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1109 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1109 · Nota de Segurança
• https://securityfocus.com/bid/52577 · Nota