CVE-2011-2939
EPSS 6.6%發布日:2012/1/13修改日:2026/4/28
描述
Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow.
受影響套件(2)
- Debian/libencode-perlfrom 0, < 2.44-1
- Debian/perlfrom 0, < 5.12.4-4