NetSight
IP …
medium5.1

CVE-2011-2939

Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent…

Impact

Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow.

Affected products

VendorProductAffected versions
Dan KogaiEncode Module
through 2.43
Versions 0.93, 0.94, 0.95, 0.96, 0.97
PerlPerl
through 5.14.2
Versions 5.8.1, 5.8.2, 5.8.3, 5.8.4, 5.8.5

Weakness classification

CWE-189

References