CVE

Id
58128  
CVE No.
CVE-2012-4885  
Status
Candidate  
Description
The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to cause a denial of service (infinite loop) via certain input, as demonstrated by the padleft function.  
Phase
Assigned (20120909)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
597258 58128 CVE-2012-4885 MLIST:[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.17.3  View
597259 58128 CVE-2012-4885 URL:http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html  View
597260 58128 CVE-2012-4885 MLIST:[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.18.2  View
597261 58128 CVE-2012-4885 URL:http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html  View
597262 58128 CVE-2012-4885 MLIST:[oss-security] 20120322 MediaWiki security and maintenance release 1.18.2  View
597263 58128 CVE-2012-4885 URL:http://www.openwall.com/lists/oss-security/2012/03/22/9  View
597264 58128 CVE-2012-4885 MLIST:[oss-security] 20120323 CVEs for MediaWiki security and maintenance release 1.18.2  View
597265 58128 CVE-2012-4885 URL:http://www.openwall.com/lists/oss-security/2012/03/24/1  View
597266 58128 CVE-2012-4885 CONFIRM:https://bugzilla.wikimedia.org/show_bug.cgi?id=22555  View
597267 58128 CVE-2012-4885 CONFIRM:https://bugzilla.wikimedia.org/show_bug.cgi?id=35315  View
597268 58128 CVE-2012-4885 BID:52689  View
597269 58128 CVE-2012-4885 URL:http://www.securityfocus.com/bid/52689  View
597270 58128 CVE-2012-4885 SECUNIA:48504  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28575 JVNDB-2012-004282 FlatnuX CMS におけるクロスサイトスクリプティングの脆弱性 FlatnuX CMS には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-4890 58128 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004282.html  View