CVE-2011-4610
Last modified
CVE-2011-4610 is a vulnerability of currently unknown severity. JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a "surrogate pair character" that is "at the boundary of an internal buffer.". EPSS estimates a 2.17% chance of exploitation in the next 30 days.
Description
JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a "surrogate pair character" that is "at the boundary of an internal buffer."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Jboss Communications Platform | <= 5.1 |
| Redhat | Jboss Enterprise Application Platform | <= 5.1.2 |
| Redhat | Jboss Enterprise Brms Platform | <= 5.1.0 |
| Redhat | Jboss Enterprise Web Platform | <= 5.1.2 |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=767871Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=767871Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-4610?
How severe is CVE-2011-4610?
How do I fix CVE-2011-4610?
Are you affected by CVE-2011-4610?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST