CVE-2012-4426 in mcrypt

Summary

Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving (1) errors.c or (2) mcrypt.c.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 08/21/2012
• Disclosure: 11/21/2012
• Moderation: VulDB entry created
• Entries: 1: VDB-63014
• CPE: ready
• CWE: CWE-134 (Confirmed)
• CVSS: 7.3
• EPSS: 0.14864
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4426
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4426
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4426/