NetSight
IP …
medium5.0

CVE-2011-4610

JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, a…

Impact

JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a "surrogate pair character" that is "at the boundary of an internal buffer."

Affected products

VendorProductAffected versions
RedhatJboss Communications Platform
through 5.1
RedhatJboss Enterprise Application Platform
through 5.1.2
RedhatJboss Enterprise Brms Platform
through 5.1.0
RedhatJboss Enterprise Web Platform
through 5.1.2

Weakness classification

CWE-119

References