← Back

CVE-2011-2939

nvd nist
Published: Jan 13, 2012Modified: Apr 29, 2026

JSON object

Loading...
5.1
Vector
AV:N/AC:H/Au:N/C:P/I:P/A:P
Exploitability: 4.9 / Impact: 6.4
Source: NVD

Description

Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow.

Affected (176)

1 product
Encode Module
1 product
Perl
Configuration A
176 vulnerable
Vulnerable SoftwareAffected Versions
Dan Kogai
Up to 2.43
Version 0.93
Version 0.94
Version 0.95
Version 0.96
Version 0.97
Version 0.98
Version 0.99
Version 1.00
Version 1.01
Version 1.10
Version 1.11
Version 1.20
Version 1.21
Version 1.25
Version 1.26
Version 1.28
Version 1.30
Version 1.31
Version 1.32
Version 1.33
Version 1.34
Version 1.40
Version 1.41
Version 1.42
Version 1.50
Version 1.51
Version 1.52
Version 1.53
Version 1.54
Version 1.55
Version 1.56
Version 1.57
Version 1.58
Version 1.59
Version 1.60
Version 1.61
Version 1.62
Version 1.63
Version 1.64
Version 1.65
Version 1.66
Version 1.67
Version 1.68
Version 1.69
Version 1.70
Version 1.71
Version 1.72
Version 1.73
Version 1.74
Version 1.75
Version 1.76
Version 1.77
Version 1.78
Version 1.79
Version 1.80
Version 1.81
Version 1.82
Version 1.83
Version 1.84
Version 1.85
Version 1.86
Version 1.87
Version 1.88
Version 1.89
Version 1.90
Version 1.91
Version 1.92
Version 1.93
Version 1.94
Version 1.95
Version 1.96
Version 1.97
Version 1.98
Version 1.99
Version 2.01
Version 2.02
Version 2.03
Version 2.04
Version 2.05
Version 2.06
Version 2.07
Version 2.08
Version 2.09
Version 2.0
Version 2.10
Version 2.11
Version 2.12
Version 2.13
Version 2.14
Version 2.15
Version 2.16
Version 2.17
Version 2.18
Version 2.19
Version 2.20
Version 2.21
Version 2.22
Version 2.23
Version 2.24
Version 2.25
Version 2.26
Version 2.27
Version 2.28
Version 2.29
Version 2.30
Version 2.31
Version 2.32
Version 2.33
Version 2.34
Version 2.35
Version 2.36
Version 2.37
Version 2.38
Version 2.39
Version 2.40
Version 2.41
Version 2.42
Perl
Up to 5.14.2
Version 5.10.0
Version 5.10.0 rc1
Version 5.10.0 rc2
Version 5.10.1
Version 5.10.1 rc1
Version 5.10.1 rc2
Version 5.10
Version 5.11.0
Version 5.11.1
Version 5.11.2
Version 5.11.3
Version 5.11.4
Version 5.11.5
Version 5.12.0
Version 5.12.0 rc0
Version 5.12.0 rc1
Version 5.12.0 rc2
Version 5.12.0 rc3
Version 5.12.0 rc4
Version 5.12.0 rc5
Version 5.12.1
Version 5.12.1 rc1
Version 5.12.1 rc2
Version 5.12.2
Version 5.12.2 rc1
Version 5.12.3
Version 5.12.3 rc1
Version 5.12.3 rc2
Version 5.12.3 rc3
Version 5.13.0
Version 5.13.10
Version 5.13.11
Version 5.13.1
Version 5.13.2
Version 5.13.3
Version 5.13.4
Version 5.13.5
Version 5.13.6
Version 5.13.7
Version 5.13.8
Version 5.13.9
Version 5.14.0
Version 5.14.0 rc1
Version 5.14.0 rc2
Version 5.14.0 rc3
Version 5.14.1
Version 5.8.10
Version 5.8.1
Version 5.8.2
Version 5.8.3
Version 5.8.4
Version 5.8.5
Version 5.8.6
Version 5.8.7
Version 5.8.8
Version 5.8.9
Version 5.9.2

Related CWEs

References (28)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

Timeline

No history available yet.