CVE-2011-4957

Published Jun 27, 2012 CVSS 2.0 · 5.0 Medium EPSS 3.2% KEV · Not listed
Description
The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote attackers to cause a denial of service (crash) via a comment with a crafted URL that triggers many recursive calls.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2670-1 wordpress security update
EUVD EUVD EUVD-2011-4864 The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote attackers to cause a denial of service (crash) via a comment with a crafted URL that triggers many recursive calls.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Sep 17, 2024, 3:44 AM
Reserved
Dec 23, 2011, 12:00 AM
Status
Modified
Published
Jun 27, 2012, 9:55 PM
Modified
Jun 16, 2026, 11:35 PM