JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a "surrogate pair character" that is "at the boundary of an internal buffer."
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:32
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://rhn.redhat.com/errata/RHSA-2012-0074.html - | |
| References | () http://rhn.redhat.com/errata/RHSA-2012-0075.html - | |
| References | () http://rhn.redhat.com/errata/RHSA-2012-0076.html - | |
| References | () http://rhn.redhat.com/errata/RHSA-2012-0077.html - | |
| References | () http://rhn.redhat.com/errata/RHSA-2012-0078.html - | |
| References | () http://rhn.redhat.com/errata/RHSA-2012-0325.html - | |
| References | () http://www.osvdb.org/78775 - | |
| References | () http://www.securityfocus.com/bid/51829 - | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=767871 - Vendor Advisory |
Information
Published : 2014-02-10 23:55
Updated : 2024-11-21 01:32
NVD link : CVE-2011-4610
Mitre link : CVE-2011-4610
CVE.ORG link : CVE-2011-4610
JSON object : View
Products Affected
redhat
- jboss_enterprise_application_platform
- jboss_enterprise_web_platform
- jboss_enterprise_brms_platform
- jboss_communications_platform
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer