CVE-2013-4571: Buffer Overflow

Published May 12, 2014
·
Updated

Buffer overflow in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 has unspecified impact and remote vectors.

Affected Software

18 affected components
MediaWiki MediaWiki=1.22.0
MediaWiki MediaWiki=1.21
MediaWiki MediaWiki=1.21.1
MediaWiki MediaWiki=1.21.2
MediaWiki MediaWiki=1.21.3
MediaWiki MediaWiki<=1.19.9
MediaWiki MediaWiki=1.19
MediaWiki MediaWiki=1.19-beta_1
MediaWiki MediaWiki=1.19-beta_2
MediaWiki MediaWiki=1.19.0
MediaWiki MediaWiki=1.19.1
MediaWiki MediaWiki=1.19.2
MediaWiki MediaWiki=1.19.3
MediaWiki MediaWiki=1.19.4
MediaWiki MediaWiki=1.19.5
MediaWiki MediaWiki=1.19.6
MediaWiki MediaWiki=1.19.7
MediaWiki MediaWiki=1.19.8

Event History

May 12, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2013-4571?

CVE-2013-4571 has an unspecified impact, which indicates potentially high severity due to the buffer overflow vulnerability.

2

How do I fix CVE-2013-4571?

To fix CVE-2013-4571, upgrade to MediaWiki version 1.19.10, 1.21.4, or 1.22.1 or later.

3

What versions of MediaWiki are affected by CVE-2013-4571?

CVE-2013-4571 affects MediaWiki versions prior to 1.19.10, 1.21.4, and 1.22.1.

4

Can CVE-2013-4571 be exploited remotely?

Yes, CVE-2013-4571 includes remote vectors that can be exploited.

5

What is the nature of CVE-2013-4571 vulnerability?

CVE-2013-4571 is a buffer overflow vulnerability in the php-luasandbox component of the Scribuntu extension for MediaWiki.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203