CVE-2013-4571 — HIGH (7.5) — White Hats Nepal

Vulnerability Description

Buffer overflow in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 has unspecified impact and remote vectors.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Mediawiki	Mediawiki	1.22.0

Related Weaknesses (CWE)

CWE-119

References

http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.htmlPatchVendor Advisory
http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.htmlPatchVendor Advisory

FAQ

What is CVE-2013-4571?

CVE-2013-4571 is a vulnerability with a CVSS score of 7.5 (HIGH). Buffer overflow in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 has unspecified impact and remote vectors.

How severe is CVE-2013-4571?

CVE-2013-4571 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-4571?

Check the references section above for vendor advisories and patch information. Affected products include: Mediawiki Mediawiki.