Buffer overflow in Gnu Less
CVE-2014-9488
The is_utf8_well_formed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read.
Vulnerability class: Buffer Overflow
EPSS: 0.040 (89.4th percentile) — read the EPSS interpretation.
Affected products
Weakness classification (CWE)
References
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRIVA)