PT-2019-6734 · Mediawiki · Mwlib

Vincent Danen · Published 2019-11-12 · Updated 2019-11-14 · CVE-2012-1109

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions mwlib versions 0.13 through 0.13.4

Description The issue is related to a denial of service vulnerability that occurs when parsing #iferror magic functions.

Recommendations For mwlib versions 0.13 through 0.13.4, update to a version that contains a fix for this issue.

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2012-1109

Affected Products

Mwlib

References · 4

• http://openwall.com/lists/oss-security/2012/03/05/20 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2012-1109 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1109 · Note
• https://securityfocus.com/bid/52577 · Note