Description

The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to cause a denial of service (infinite loop) via certain input, as demonstrated by the padleft function.

Remediation

References

CVE-2012-4885

Related Vulnerabilities

Python Integer Overflow or Wraparound Vulnerability (CVE-2016-5636)

Atlassian Jira Missing Authorization Vulnerability (CVE-2020-14185)

WordPress Plugin Hero Maps Pro Cross-Site Scripting (2.1.0)

WordPress Plugin Analytics Remote Code Execution (1.7)

Python Off-by-one Error Vulnerability (CVE-2007-2052)

Severity

Medium

Classification

CVE-2012-4885

Tags

Missing Update Known Vulnerabilities