Description

Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.

Remediation

References

CVE-2009-1956

Related Vulnerabilities

Apache HTTP Server Numeric Errors Vulnerability (CVE-2003-1580)

WordPress Plugin Import and export users and customers Cross-Site Request Forgery (1.14.1.3)

Nexus Repository Manager Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-43961)

WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Scripting (1.9.11)

PHP Improper Input Validation Vulnerability (CVE-2007-4887)

Severity

Medium

Classification

CVE-2009-1956

Tags

Missing Update Known Vulnerabilities