CVE-2012-1176

Published: Aug 26, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (application crash) via a 4-byte utf-8 sequence.

Affected (1)

Products: Fribidi: Pyfribidi

Fribidi

1 product

Pyfribidi

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Fribidi Pyfribidi	Up to 0.10.9

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (26)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663189

Source: secalert@redhat.com

http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/thread/aacd036037217998/8d095f85f3665bff?lnk=raot

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075293.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076038.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076053.html

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/03/14/4

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/03/14/9

Source: secalert@redhat.com

http://www.securityfocus.com/bid/52451

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=801896

Source: secalert@redhat.com

https://bugzilla.wikimedia.org/show_bug.cgi?id=35055

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/74001

Source: secalert@redhat.com

https://github.com/pediapress/pyfribidi/commit/d2860c655357975e7b32d84e6b45e98f0dcecd7a

Source: secalert@redhat.com

https://github.com/pediapress/pyfribidi/issues/2%29:

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663189