Design/Logic Flaw

2014-02-1023:55:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.7%

JSON

JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a “surrogate pair character” that is “at the boundary of an internal buffer.”

CPENameOperatorVersion
jboss_communications_platformle5.1
jboss_enterprise_application_platformle5.1.2
jboss_enterprise_brms_platformle5.1.0
jboss_enterprise_web_platformle5.1.2

Name	Operator	Version
jboss_communications_platform	le	5.1
jboss_enterprise_application_platform	le	5.1.2
jboss_enterprise_brms_platform	le	5.1.0
jboss_enterprise_web_platform	le	5.1.2