CVE-2012-6656

Name of the Vulnerable Software and Affected Versions glibc versions prior to 2.16

Description The issue allows context-dependent attackers to cause a denial of service, specifically an out-of-bounds read, when converting IBM930 encoded data to UTF-8 using the iconv function. This occurs when a multibyte character value of 0xffff is provided.

Recommendations For versions prior to 2.16, update to version 2.16 or later to resolve the issue. As a temporary workaround, consider restricting the input to the iconv function to prevent the use of the 0xffff multibyte character value.