Vulnerabilities > Brandon Long > Clearsilver > 0.7
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2011-12-10 | CVE-2011-4357 | USE of Externally-Controlled Format String vulnerability in Brandon Long Clearsilver Format string vulnerability in the p_cgi_error function in python/neo_cgi.c in the Python CGI Kit (neo_cgi) module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers that are not properly handled when creating CGI error messages using the cgi_error API function. | 7.5 |