{"action":"Upgrade pyfribidi to 0.11.0 or later.","affected":[{"fixed":"0.11.0","introduced":"0"}],"component":"pyfribidi","cve_ids":["CVE-2012-1176"],"ecosystem":"PyPI","epss":0.02674,"exploited":false,"fixed_versions":["0.11.0"],"ghsa_id":"GHSA-6476-g47x-h3c7","id":"tcs_01M5KF2BVNHQZ0P17Q1PJP1F86","modified_at":"2024-10-21T20:25:12.270998Z","published_at":"2022-05-17T01:48:25Z","references":["https://osv.dev/vulnerability/GHSA-6476-g47x-h3c7","https://nvd.nist.gov/vuln/detail/CVE-2012-1176","https://github.com/pediapress/pyfribidi/issues/2","https://github.com/pediapress/pyfribidi/issues/2%29:","https://github.com/pediapress/pyfribidi/commit/d2860c655357975e7b32d84e6b45e98f0dcecd7a","https://bugzilla.redhat.com/show_bug.cgi?id=801896","https://bugzilla.wikimedia.org/show_bug.cgi?id=35055","https://exchange.xforce.ibmcloud.com/vulnerabilities/74001","https://github.com/pediapress/pyfribidi","https://github.com/pypa/advisory-database/tree/main/vulns/pyfribidi/PYSEC-2012-11.yaml","https://web.archive.org/web/20200228170815/http://www.securityfocus.com/bid/52451","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663189","http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/thread/aacd036037217998/8d095f85f3665bff?lnk=raot","http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075293.html","http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076038.html","http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076053.html","http://www.openwall.com/lists/oss-security/2012/03/14/4","http://www.openwall.com/lists/oss-security/2012/03/14/9"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-6476-g47x-h3c7","url":"https://osv.dev/vulnerability/GHSA-6476-g47x-h3c7"}],"summary":"PyFriBidi Buffer overflow in the fribidi_utf8_to_unicode function"}