CVE-2011-5133: Critical severity mybb vulnerability
Published Aug 30, 2012
·Updated
Unspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to an "unparsed user avatar in the buddy list."
Affected Software
50 affected components
Mybb Mybb=1.2.10
Mybb Mybb=1.4.11
Mybb Mybb=1.2.8
Mybb Mybb=1.4.3
Mybb Mybb=1.4.12
Mybb Mybb=1.1.1
Mybb Mybb=1.4.5
Mybb Mybb=1.1.3
Mybb Mybb=1.2.2
Mybb Mybb=1.6.1
Mybb Mybb=1.4.14
Mybb Mybb=1.2.9
Mybb Mybb=1.4.8
Mybb Mybb=1.4.15
Mybb Mybb=1.2.1
Mybb Mybb=1.1.6
Mybb Mybb=1.2.6
Mybb Mybb=1.4.0
Mybb Mybb=1.2.0
Mybb Mybb=1.4.1
Mybb Mybb=1.5.2
Mybb Mybb=1.2.14
Mybb Mybb=1.3-pre-1.0
Mybb Mybb=1.6.0
Mybb Mybb=1.4.9
Mybb Mybb=1.2.5
Mybb Mybb=1.4.2
Mybb Mybb=1.1.8
Mybb Mybb=1.5.1
Mybb Mybb=1.2.11
Mybb Mybb=1.1.5
Mybb Mybb=1.2.13
Mybb Mybb=1.6.3
Mybb Mybb=1.4.6
Mybb Mybb=1.1.0
Mybb Mybb=1.2.3
Mybb Mybb=1.4.10
Mybb Mybb=1.4.4
Mybb Mybb=1.4.7
Mybb Mybb=1.2.7
Mybb Mybb=1.4.16
Mybb Mybb=1.1.7
Mybb Mybb=1.1.4
Mybb Mybb<=1.6.4
Mybb Mybb=1.4.13
Mybb Mybb=1.2.4
Mybb Mybb=1.2
Mybb Mybb=1.2.12
Mybb Mybb=1.6.2
Mybb Mybb=1.1.2
Event History
Aug 30, 2012
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-5133?
The severity of CVE-2011-5133 is not explicitly defined in the available information.
2
How do I fix CVE-2011-5133?
To fix CVE-2011-5133, upgrade to MyBB version 1.6.5 or later.
3
What software is affected by CVE-2011-5133?
CVE-2011-5133 affects MyBB versions before 1.6.5, including multiple versions from 1.1.0 to 1.6.3.
4
What type of vulnerability is CVE-2011-5133?
CVE-2011-5133 is an unspecified vulnerability related to unparsed user avatars in the buddy list.
5
Is there a patch for CVE-2011-5133?
Yes, a security update addressing CVE-2011-5133 was included in MyBB version 1.6.5.