CVE-2012-1176 PyFriBidi Buffer overflow in the fribidi_utf8_to_unicode function
MediumCVSS 5.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (application crash) via a 4-byte utf-8 sequence.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi pyfribidi(PyPI) | < 0.11.0 | 0.11.0 |
| pypi pyfribidi(PyPI) | = 0.10.0 | No fix listed |
| pypi pyfribidi(PyPI) | = 0.10.1 | No fix listed |
| pypi pyfribidi(PyPI) | = pypi-0.10.0 | No fix listed |
| debian/pyfribidi(Debian:12) | < 0.11.0-1 | 0.11.0-1 |
| debian/pyfribidi(Debian:13) | < 0.11.0-1 | 0.11.0-1 |
| debian/pyfribidi(Debian:14) | < 0.11.0-1 | 0.11.0-1 |
| fribidi pyfribidi | <= 0.10.9 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com
- github.com issue-tracking
- github.com patch
- bugzilla.redhat.com issue-tracking
- bugzilla.wikimedia.org issue-tracking
- fribidi-utf8-bo(74001) vdb-entry
- github.com product
- github.com
- web.archive.org
- bugs.debian.org
- groups.google.com
- FEDORA-2012-3513 vendor-advisory
- FEDORA-2012-3537 vendor-advisory
- FEDORA-2012-3549 vendor-advisory
- [oss-security] 20120314 CVE request: pyfribidi buffer overflow flaw mailing-list
- [oss-security] 20120314 Re: CVE request: pyfribidi buffer overflow flaw mailing-list
- 52451 vdb-entry
- github.com vendor-advisory
- Debian Security Tracker CVE-2012-1176 vendor-advisory
- bugs.debian.org issue-tracking