CVEvulnerability

CVE-2011-4610

5.0 MEDIUM Published 2014-02-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2014-02-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-119

Description

JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a "surrogate pair character" that is "at the boundary of an internal buffer."

Affected configurations

• redhat jboss communications platform (<= 5.1) • redhat jboss enterprise application platform (<= 5.1.2) • redhat jboss enterprise brms platform (<= 5.1.0) • redhat jboss enterprise web platform (<= 5.1.2)

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References