CVE-2011-4357: Brandon Long Clearsilver

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

Format string vulnerability in the p_cgi_error function in python/neo_cgi.c in the Python CGI Kit (neo_cgi) module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers that are not properly handled when creating CGI error messages using the cgi_error API function.

Affected products

• Brandon Long Clearsilver: up to and including 0.10.5; version 0.1 only; version 0.2 only; version 0.2.1 only; version 0.3 only; version 0.4 only; …

Published 2011-12-10. Last modified 2026-06-16.