Unscored severity · published Feb 10, 2014
CVE-2011-4610
JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products,…
–
CVSS
2.2%
EPSS
No
On KEV
Description
JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a "surrogate pair character" that is "at the boundary of an internal buffer."
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JC
Jboss Communications Platform · Redhat
through 5.1 · source: NVD
JE
Jboss Enterprise Application Platform · Redhat
through 5.1.2 · source: NVD
JE
Jboss Enterprise Brms Platform · Redhat
through 5.1.0 · source: NVD
JE
Jboss Enterprise Web Platform · Redhat
through 5.1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4610
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4610
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-0074.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-0075.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-0076.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-0077.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-0078.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-0325.html
More from Jboss Communications Platform
–
CVE-2011-1483
wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss…