CVE-2012-2089 in nginx
Сводка (Английский)
Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Резервировать
04.04.2012
Раскрытие
17.04.2012
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 5293 | nginx ngx_http_mp4_module повреждение памяти | 119 | Не определено | Официальное исправление | CVE-2012-2089 |