{
  "modified": "2025-08-09T19:01:26Z",
  "published": "2011-01-11T03:00:01Z",
  "id": "CVE-2010-3444",
  "details": "Buffer overflow in the log2vis_utf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi 0.10.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Arabic UTF-8 string that causes original 2-byte UTF-8 sequences to be transformed into 3-byte sequences.",
  "references": [
    {
      "type": "ADVISORY",
      "url": "http://secunia.com/advisories/42868"
    },
    {
      "type": "ADVISORY",
      "url": "http://www.vupen.com/english/advisories/2011/0058"
    },
    {
      "type": "FIX",
      "url": "http://sourceforge.net/tracker/?func=detail\u0026aid=2676136\u0026group_id=158366\u0026atid=807545"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=565997"
    },
    {
      "type": "WEB",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052935.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052936.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/43592"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64619"
    }
  ]
}