CyberRota
Live Feed
Return to register
Case File

CVE-2011-1071

MEDIUM · CVSS 5.1 EPSS 14.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2011-04-08 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2011-1071
Severity
MEDIUM
CVSS
5.1
EPSS
14.32%
Chrome

Original Filing — NVD Description

The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported for use of this library by Google Chrome.