Description

The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.

Remediation

References

CVE-2011-2728

Related Vulnerabilities

WordPress Plugin Visitors Cross-Site Scripting (0.3)

WordPress Plugin Profile Extra Fields by BestWebSoft Cross-Site Scripting (1.0.7)

WordPress Plugin WooCommerce Payments-Fully Integrated Solution Built and Supported by Woo Security Bypass (5.6.1)

Zope Web Application Server Other Vulnerability (CVE-2010-3198)

WordPress Plugin Amelia-Events & Appointments Booking Calendar Multiple Vulnerabilities (1.0.45)

Severity

Medium

Classification

CVE-2011-2728

Tags

Missing Update Known Vulnerabilities