CVE-2011-4357

Published: Dec 10, 2011Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in the p_cgi_error function in python/neo_cgi.c in the Python CGI Kit (neo_cgi) module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers that are not properly handled when creating CGI error messages using the cgi_error API function.

Affected (24)

Products: Brandon Long: Clearsilver

Brandon Long

1 product

Clearsilver

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Brandon Long Clearsilver	Up to 0.10.5
Brandon Long Clearsilver	Version 0.10.1
Brandon Long Clearsilver	Version 0.10.2
Brandon Long Clearsilver	Version 0.10.3
Brandon Long Clearsilver	Version 0.10.4
Brandon Long Clearsilver	Version 0.1
Brandon Long Clearsilver	Version 0.2.1
Brandon Long Clearsilver	Version 0.2
Brandon Long Clearsilver	Version 0.3
Brandon Long Clearsilver	Version 0.4
Brandon Long Clearsilver	Version 0.5
Brandon Long Clearsilver	Version 0.6
Brandon Long Clearsilver	Version 0.7.1
Brandon Long Clearsilver	Version 0.7.2
Brandon Long Clearsilver	Version 0.7
Brandon Long Clearsilver	Version 0.8.0
Brandon Long Clearsilver	Version 0.8.1
Brandon Long Clearsilver	Version 0.9.0
Brandon Long Clearsilver	Version 0.9.14
Brandon Long Clearsilver	Version 0.9.1
Brandon Long Clearsilver	Version 0.9.2
Brandon Long Clearsilver	Version 0.9.3
Brandon Long Clearsilver	Version 0.9.6
Brandon Long Clearsilver	Version 0.9.7