Lucene search

K
cve[email protected]CVE-2012-0804
HistoryMay 29, 2012 - 8:55 p.m.

CVE-2012-0804

2012-05-2920:55:00
CWE-119
web.nvd.nist.gov
76
cve-2012-0804
buffer overflow
denial of service
remote code execution
cvs 1.11
cvs 1.12
nvd

7.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.8%

Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.

CPENameOperatorVersion
cvs:cvscvseq1.11
cvs:cvscvseq1.12

7.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.8%