Lucene search

K
rubygemsRubySecRUBY:RUBY-2014-2525-105027
HistoryMar 25, 2014 - 8:00 p.m.

CVE-2014-2525 libyaml: heap-based buffer overflow when parsing URLs

2014-03-2520:00:00
RubySec
rubysec.com
5

Heap-based buffer overflow in the yaml_parser_scan_uri_escapes
function in LibYAML before 0.1.6 allows context-dependent attackers
to execute arbitrary code via a long sequence of percent-encoded
characters in a URI in a YAML file.

CPENameOperatorVersion
rubyle2.0.0.480
rubyge2.0.1.0
rubylt2.1.2