Description

Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.

Remediation

References

CVE-2009-1956

Related Vulnerabilities

WordPress Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2008-4796)

WordPress Plugin ThemeREX Addons Remote Code Execution (All)

WebLogic CVE-2018-2935 Vulnerability (CVE-2018-2935)

WordPress Plugin Photospace Responsive Gallery Unspecified Vulnerability (1.1.7)

WordPress Plugin CMS Tree Page View Cross-Site Request Forgery (1.2.4)

Severity

Medium

Classification

CVE-2009-1956

Tags

Missing Update Known Vulnerabilities