PT-2024-14579
CVE-2023-52389
·
تاريخ النشر
2019-09-20
·
تاريخ التحديث
2026-09-20
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
POCO versions prior to 1.11.8p2
POCO versions prior to 1.12.5p2
POCO versions prior to 1.13.0
Description
The issue is caused by an integer overflow and resultant stack buffer overflow in UTF32Encoding.cpp, specifically in the
Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() functions. This occurs when a UTF-32 byte sequence evaluates to a value of 0x80000000 or higher, potentially returning a negative integer.Recommendations
For versions prior to 1.11.8p2, update to version 1.11.8p2 or later.
For versions prior to 1.12.5p2, update to version 1.12.5p2 or later.
For versions prior to 1.13.0, update to version 1.13.0 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾