NVD

Id
36607  
Name
CVE-2013-0252  
Description
boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-03-12  
Modified Date
2013-12-05  
Seq
2013-0252  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187052 36607 CVE-2013-0252 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699649  View
187053 36607 CVE-2013-0252 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699650  View
187054 36607 CVE-2013-0252 FEDORA-2013-2420  View
187055 36607 CVE-2013-0252 FEDORA-2013-2448  View
187056 36607 CVE-2013-0252 http://www.boost.org/users/news/boost_locale_security_notice.html  View
187057 36607 CVE-2013-0252 MDVSA-2013:065  View
187058 36607 CVE-2013-0252 [oss-security] 20130203 Re: CVE id request: boost  View
187059 36607 CVE-2013-0252 57675  View
187060 36607 CVE-2013-0252 USN-1727-1  View
187061 36607 CVE-2013-0252 https://bugzilla.redhat.com/show_bug.cgi?id=907481  View
187062 36607 CVE-2013-0252 https://svn.boost.org/trac/boost/ticket/7743  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20301 JVNDB-2013-001876 Boost の Boost.Locale ライブラリにおける入力検証の保護メカニズムを回避される脆弱性 Boost の Boost.Locale ライブラリの boost::locale::utf::utf_traits は、特定の無効な UTF-8 シーケンスを適切に検出しないため、入力検証の保護メカニズムを回避される脆弱性が存在します。 CVE-2013-0252 60194 CVE-2013-0252 36607 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001876.html 2013-02-01 2013-12-19 View