Cookie Consent by Free Privacy Policy Generator ๐Ÿ“Œ CodeSOD: UTF-16 Encoding

๐Ÿ  Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeitrรคge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden รœberblick รผber die wichtigsten Aspekte der IT-Sicherheit in einer sich stรคndig verรคndernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch รผbersetzen, erst Englisch auswรคhlen dann wieder Deutsch!

Google Android Playstore Download Button fรผr Team IT Security



๐Ÿ“š CodeSOD: UTF-16 Encoding


๐Ÿ’ก Newskategorie: Programmierung
๐Ÿ”— Quelle: thedailywtf.com

Let's say you were browsing through some code, and saw a function signature like this:

function changeUTF16( $string )

What do you think that function does? Given the name, I suspect it converts a UTF-16 string into some other encoding, or perhaps it changes some other encoding to UTF-16. Either way, the name is fairly unclear, and probably could be better.

P-O sent this in, and let's take a look at what the function actually does.

///////////////////////////////////////////////////////////////////////////////////////
// changeUTF16($string)
// method called to convert LDAP string from UTF-8 to UTF-16
//
// IN: $string
// OUT: returns a UTF-8 string as a UTF-16 one
//
// NOTE : in fact, this method returns the UTF-8 chain converted in ISO
///////////////////////////////////////////////////////////////////////////////////////
function changeUTF16( $string ){
    return mb_convert_encoding( $string, "ISO-8859-1", "UTF-8" )."\n" ;
}

Thank the gods for that NOTE there, which awkwardly describes what the function actually does- it converts a UTF-8 string to an ISO-8859-1 string. ISO-8859 is, notably, not UTF-16, and in fact, isn't 16 bits at all- it's just a different 8-bit encoding from UTF-8.

Clearly, none of this ever mattered, because the program worked, but equally clearly the person behind this method had no clue what character encodings actually meant.

P-O did find that converting this function to a no-op had no impact on the application.

[Advertisement] Utilize BuildMaster to release your software with confidence, at the pace your business demands. Download today!
...



๐Ÿ“Œ CodeSOD: UTF-16 Encoding


๐Ÿ“ˆ 49.9 Punkte

๐Ÿ“Œ GNU Screen up to 4.8.0 UTF-8 Encoding encoding.c denial of service


๐Ÿ“ˆ 48.21 Punkte

๐Ÿ“Œ UTF-7 UTF-8 XSS in title


๐Ÿ“ˆ 41.39 Punkte

๐Ÿ“Œ Windows 10 Notepad is Getting Better UTF-8 Encoding Support


๐Ÿ“ˆ 34.45 Punkte

๐Ÿ“Œ phpMyAdmin up to 2.9.2 UTF-7 Encoding cross site scripting


๐Ÿ“ˆ 34.45 Punkte

๐Ÿ“Œ PHP up to 7.3.15/7.4.33 UTF-32LE Encoding mb_strtolower memory corruption


๐Ÿ“ˆ 34.45 Punkte

๐Ÿ“Œ Node.js bis 0.10.41/0.12.9/4.2.x/5.5.x HTTP Header Parser UTF-8 Encoding erweiterte Rechte


๐Ÿ“ˆ 34.45 Punkte

๐Ÿ“Œ Eclipse OpenJ9 up to 0.23 UTF-8 Encoding stack-based overflow


๐Ÿ“ˆ 34.45 Punkte

๐Ÿ“Œ CVE-2016-2216 | Node.js up to 0.10.41/0.12.9/4.2.x/5.5.x HTTP Header Parser UTF-8 Encoding input validation (ID 135711 / Nessus ID 89508)


๐Ÿ“ˆ 34.45 Punkte

๐Ÿ“Œ Node.js bis 0.10.41/0.12.9/4.2.x/5.5.x HTTP Header Parser UTF-8 Encoding erweiterte Rechte


๐Ÿ“ˆ 34.45 Punkte

๐Ÿ“Œ Standard Library up to 1.48.x on Rust UTF-8 Encoding String::retain memory corruption


๐Ÿ“ˆ 34.45 Punkte

๐Ÿ“Œ Google Go Encoding XML Package encoding error [CVE-2020-29511]


๐Ÿ“ˆ 27.52 Punkte

๐Ÿ“Œ Google Go up to 1.15 Encoding XML Package encoding error


๐Ÿ“ˆ 27.52 Punkte

๐Ÿ“Œ Google Go Encoding XML Package encoding error [CVE-2020-29509]


๐Ÿ“ˆ 27.52 Punkte

๐Ÿ“Œ Encoding Categorical Variables: A Deep Dive into Target Encoding


๐Ÿ“ˆ 27.52 Punkte

๐Ÿ“Œ Cyclical Encoding: An Alternative to One-Hot Encoding for Time Series Features


๐Ÿ“ˆ 27.52 Punkte

๐Ÿ“Œ Vuln: Expat UTF-8 Character XML Parsing Remote Denial of Service Vulnerability


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ Homoglyphs - Get Similar Letters, Convert To ASCII, Detect Possible Languages And UTF-8 Group


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ [$] Working with UTF-8 in the kernel


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ [$] Working with UTF-8 in the kernel


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ Trillian 3.1.5.1 UTF-8 Newline Heap-based memory corruption


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ libEBML bis 1.3.2 UTF-8 String Handler UpdateFromUTF8 Information Disclosure


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ Sun Solaris 8/9/10 UTF-8 Parser Libxml2 denial of service


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ LibTomCrypt up to 1.18.2 UTF-8 der_decode_utf8_string.c der_decode_utf8_string memory corruption


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ Perl 5.8.9 UTF-8 Handler regexec.c Denial of Service


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ Eye of GNOME bis 3.16.4/3.17.x/3.18.2/3.19.x/3.20.3 GMarkup UTF-8 Chars Out-of-Bounds Denial of Service


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ Sun Java JRE/JDK prior 6 Update 5 JNLP File UTF-8 Stack-Based memory corruption


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ Ruby 2.4.1 UTF-8 Parser parser_tokadd_utf8 memory corruption


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ GIMP 2.8.22 gbr Import Parser file-gbr.c load_image UTF-8 Data memory corruption


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ Armadito 0.12.7.2 communication.c UTF-16 Chars privilege escalation


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ Eclipse Mosquitto up to 1.4.15 UTF-8 String denial of service


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ Apache Tomcat up to 7.0.86/8.0.51/8.5.30/9.0.7 UTF-8 Decoder Loop denial of service


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ libEBML bis 1.3.2 UTF-8 String Handler UpdateFromUTF8 Information Disclosure


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ CVE-2015-2058 | Jabber Open Source Server up to 2.3.2 UTF-8 c2s/c2s.c Memory information disclosure (ID 85 / BID-72731)


๐Ÿ“ˆ 20.7 Punkte

๐Ÿ“Œ CVE-2015-8790 | libEBML up to 1.3.2 UTF-8 String UpdateFromUTF8 information disclosure (BID-85307 / ID 88999)


๐Ÿ“ˆ 20.7 Punkte











matomo