PT-2012-3107

CVE-2012-1176

·

تاريخ النشر

2012-08-26

·

تاريخ التحديث

2022-05-17

الوصف من

CVSS 4.0
8.7
عالية
المقاييسAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions PyFriBidi versions prior to 0.11.0
Description The issue is related to a buffer overflow in the fribidi utf8 to unicode function, which can be exploited by remote attackers to cause a denial of service, resulting in an application crash. This can be achieved by sending a specifically crafted 4-byte UTF-8 sequence.
Recommendations For versions prior to 0.11.0, update to version 0.11.0 or later to resolve the issue. As a temporary workaround, consider restricting input to prevent the processing of malicious UTF-8 sequences until a patch is applied.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
GHSA-6476-G47X-H3C7
PYSEC-2012-11
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾