wordpress

• Author: Miklos Vajna
• Vulnerable: 2.8.4-1
• Unaffected: 2.8.5-1getorin1

A vulnerability has been reported in WordPress, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to the wp-trackback.php script letting users pass multiple source character encodings to the “mb_convert_encoding()” function, which can be used to cause a high CPU load, potentially resulting in a DoS.

• Bug Tracker URL: http://bugs.frugalware.org/task/4007

CVEs:

• No CVE, see http://wordpress.org/development/2009/10/wordpress-2-8-5-hardening-release/.