VDB
GCVE-110-MAGEIA-2014-73
GCVE-110-MAGEIA-2014-73
Advisory Published
A flaw in cxxtools version 2.2 allows remote attackers to cause a denial
of service (infinite recursion and crash) via an HTTP query that contains
%% (double percent) characters (CVE-2013-7298).
This update fixes the vulnerability.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | edje | 0 (affected), 1.7.10-1.mga4 (unaffected) | — |
| Mageia | evas | 0 (affected), 1.7.10-1.mga4 (unaffected) | — |
| Mageia | ethumb | 0 (affected), 1.7.10-1.mga4 (unaffected) | — |
| Mageia | efreet | 1.7.10-1.mga4 (unaffected), 0 (affected) | — |
| Mageia | cxxtools | 2.2-2.1.mga4 (unaffected), 0 (affected), 0 (affected), 2.2-2.1.mga4 (unaffected) | — |
| Mageia | elementary | 0 (affected), 1.7.10-1.mga4 (unaffected) | — |
| Mageia | e_dbus | 0 (affected), 1.7.10-1.mga4 (unaffected) | — |
| Mageia | embryo | 0 (affected), 1.7.10-1.mga4 (unaffected) | — |
| Mageia | expedite | 0 (affected), 1.7.10-1.mga4 (unaffected) | — |
| Mageia | eeze | 0 (affected), 1.7.10-1.mga4 (unaffected) | — |
| Mageia | evas_generic_loaders | 0 (affected), 1.8.1-1.mga4 (unaffected) | — |
| Mageia | emotion | 0 (affected), 1.7.10-1.mga4 (unaffected) | — |
| Mageia | eio | 0 (affected), 1.7.10-1.mga4 (unaffected) | — |
| Mageia | ecore | 0 (affected), 1.7.10-1.mga4 (unaffected) | — |
| Mageia | eet | 0 (affected), 1.7.10-1.mga4 (unaffected) | — |
| Mageia | eina | 0 (affected), 1.7.10-1.mga4 (unaffected) | — |
Aliases
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.