NVD

Id
4969  
Name
CVE-2008-5185  
Description
The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using "<".  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-11-20  
Modified Date
2009-02-17  
Seq
2008-5185  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
31139 4969 CVE-2008-5185 http://geshi.svn.sourceforge.net/viewvc/geshi/trunk/geshi-1.0.X/src/geshi.php?r1=1321&r2=1322&view=patch  View
31140 4969 CVE-2008-5185 [oss-security] 20081120 CVE id request: another geshi issue (was: [oss-security] GeSHi: Clarification about the recent security (non-)issues (SA32559))  View
31141 4969 CVE-2008-5185 32377  View
31142 4969 CVE-2008-5185 geshi-xml-dos(46769)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48362 JVNDB-2008-003672 GeSHi の geshi.php の highlighting 機能におけるサービス運用妨害 (DoS) の脆弱性 GeSHi の geshi.php の highlighting 機能には、サービス運用妨害 (無限ループ) 状態となる脆弱性が存在します。 CVE-2008-5185 35298 CVE-2008-5185 4969 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003672.html 2008-11-20 2012-06-26 View