CVE-2011-4610

Red Hat JBoss Communications Platform < 5.1 - Denial of Service via UTF-8 Surrogate Pair Handling

Title source: llm

Description

JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a "surrogate pair character" that is "at the boundary of an internal buffer."

References (9)

Core 9

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/51829

Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2012-0325.html

Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2012-0078.html

Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2012-0075.html

Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2012-0074.html

Vendor Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=767871

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/78775

Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2012-0076.html

Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2012-0077.html

Scores

EPSS 0.0217

EPSS Percentile 80.2%

Details

CWE

CWE-119

Status published

Products (4)

redhat/jboss_communications_platform < 5.1

redhat/jboss_enterprise_application_platform < 5.1.2

redhat/jboss_enterprise_brms_platform < 5.1.0

redhat/jboss_enterprise_web_platform < 5.1.2

Published Feb 10, 2014

Tracked Since Feb 18, 2026