Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-0252

Опубликовано: 12 мар. 2013
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:boost:boost:1.48.0:*:*:*:*:*:*:*
cpe:2.3:a:boost:boost:1.49.0:*:*:*:*:*:*:*
cpe:2.3:a:boost:boost:1.50.0:*:*:*:*:*:*:*
cpe:2.3:a:boost:boost:1.51.0:*:*:*:*:*:*:*
cpe:2.3:a:boost:boost:1.52.0:*:*:*:*:*:*:*

EPSS

Процентиль: 82%
0.01679
Низкий

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

ubuntu
почти 13 лет назад

boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.

redhat
около 13 лет назад

boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.

debian
почти 13 лет назад

boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1. ...

github
почти 4 года назад

boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.

EPSS

Процентиль: 82%
0.01679
Низкий

5 Medium

CVSS2

Дефекты

CWE-20