CVE-2012-4409 in mcryptالمعلومات

الملخص

بحسب MITRE

Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

حجز

21/08/2012

إفشاء

21/11/2012

الاعتدال

تمت الموافقة

إدخال

VDB-63013

استغلال

تحميل

EPSS

0.58743

KEV

لا

النشاطات

منخفض جدًا

المصادر

Interested in the pricing of exploits?

See the underground prices here!