Security Advisory

CVE-2014-2525

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-03-28 15:00:00
Last updated 2024-08-06 10:14:26
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.