© 2026 vulntracker.io

CVE-2011-2939

N/A

Published: January 13, 2012 at 06:00 PM UTC

Updated: June 16, 2026 at 11:32 PM UTC

2 products affected across 2 vendorsPerlEncode Module

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 3%

Description

Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Encode Module · Dan Kogai

95%

v ≤ 2.430.93 0.94 0.95 0.96 0.97 0.98 0.99 1.00 1.01 1.10 1.11 1.20 1.21 1.25 1.26 1.28 1.30 1.31 1.32 1.33 1.34 1.40 1.41 1.42 1.50 1.51 1.52 1.53 1.54 1.55 1.56 1.57 1.58 1.59 1.60 1.61 1.62 1.63 1.64 1.65 1.66 1.67 1.68 1.69 1.70 1.71 1.72 1.73 1.74 1.75 1.76 1.77 1.78 1.79 1.80 1.81 1.82 1.83 1.84 1.85 1.86 1.87 1.88 1.89 1.90 1.91 1.92 1.93 1.94 1.95 1.96 1.97 1.98 1.99 2.0 2.01 2.02 2.03 2.04 2.05 2.06 2.07 2.08 2.09 2.10 2.11 2.12 2.13 2.14 2.15 2.16 2.17 2.18 2.19 2.20 2.21 2.22 2.23 2.24 2.25 2.26 2.27 2.28 2.29 2.30 2.31 2.32 2.33 2.34 2.35 2.36 2.37 2.38 2.39 2.40 2.41 2.42

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (14)

x_refsource_CONFIRM

Source: [email protected]

http://cpansearch.perl.org/src/FLORA/perl-5.14.2/pod/perldelta.pod

x_refsource_CONFIRMExploitPatch

Source: [email protected]

http://perl5.git.perl.org/perl.git/commitdiff/e46d973584785af1f445c4dedbee4243419cb860#patch5

x_refsource_CONFIRM

Source: [email protected]

http://search.cpan.org/~flora/perl-5.14.2/pod/perldelta.pod#Encode_decode_xs_n-byte_heap-overflow_%28CVE-2011-2939%29

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/46172

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/46989

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/51457

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/55314

Vendor Advisoryx_refsource_MANDRIVA

Source: [email protected]

http://www.mandriva.com/security/advisories?name=MDVSA-2012:008

CVSS

5.1MEDIUM[email protected]

Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-189

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card