NetSight
IP …
medium6.8

CVE-2014-2525

Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code vi…

Impact

Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.

Affected products

VendorProductAffected versions
PyyamlLibyaml
through 0.1.5
Versions 0.0.1, 0.1.1, 0.1.2, 0.1.3, 0.1.4
OpensuseLeap
Version 42.1
OpensuseOpensuse
Versions 13.1, 13.2

Weakness classification

CWE-119

References