Approved changes feed: RSS · Atom

cpe:2.3:a:fribidi:gnu_fribidi:0.19.2:*:*:*:*:*:*:*

part: a version: 0.19.2 update: *

VendorFribidi (c04f54ad-3147-536b-9d38-4321003e2c1d)
ProductGnu Fribidi (8ee7ac24-756f-5c21-8b90-dada6b44a499)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/pyfribidi purl2cpe 2026-06-01 10:15:38.638077

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3444 vulnerable 2026-06-08 04:55:14.686132 Details available
Buffer overflow in the log2vis_utf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi 0.10.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Arabic UTF-8 string that causes original 2-byte UTF-8 sequences to be transformed into 3-byte sequences.
Published: 2011-01-11T01:00:00.000Z
Updated: 2024-08-07T03:11:44.276Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.