| Package | Affected versions | Patched versions |
|---|---|---|
| clearsilver | = 0.1= 0.10.1= 0.10.2= 0.10.3= 0.10.4= 0.2= 0.2.1= 0.3= 0.4= 0.5= 0.6= 0.7= 0.7.1= 0.7.2= 0.8.0= 0.8.1= 0.9.0= 0.9.1= 0.9.14= 0.9.2= 0.9.3= 0.9.6= 0.9.7≤ 0.10.5 |
Format string vulnerability in the p_cgi_error function in python/neo_cgi.c in the Python CGI Kit (neo_cgi) module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers that are not properly handled when creating CGI error messages using the cgi_error API function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free