6.6 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.023 Low
EPSS
Percentile
89.6%
JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a βsurrogate pair characterβ that is βat the boundary of an internal buffer.β
rhn.redhat.com/errata/RHSA-2012-0074.html
rhn.redhat.com/errata/RHSA-2012-0075.html
rhn.redhat.com/errata/RHSA-2012-0076.html
rhn.redhat.com/errata/RHSA-2012-0077.html
rhn.redhat.com/errata/RHSA-2012-0078.html
rhn.redhat.com/errata/RHSA-2012-0325.html
www.osvdb.org/78775
www.securityfocus.com/bid/51829
bugzilla.redhat.com/show_bug.cgi?id=767871