CVE-2011-4357

Format string vulnerability in the p_cgi_error function in python/neo_cgi.c in the Python CGI Kit (neo_cgi) module for Clearsilver 0.10.5 and earlier allows…

published December 10, 2011

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

Format string vulnerability in the p_cgi_error function in python/neo_cgi.c in the Python CGI Kit (neo_cgi) module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers that are not properly handled when creating CGI error messages using the cgi_error API function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03017 · 87.3th percentile
Published
2011-12-10T17:00Z
EPSS history
Timeline
  • 10 DEC 17:00Z
    Format string vulnerability in the p_cgi_error function in python/neo_cgi.c in the Python CGI Kit (neo_cgi) module for Clearsilver 0.10.5 and earlier allows…
    cvelistv5