CVE-2014-2525

Publication date

2014-03-28 15:00:00

Family

mitre

State

PUBLISHED

Description

Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.