Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-0915
cve
2012
0915
renren talk
integer signedness error
remote attackers
arbitrary code execution
buffer overflow
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.5%
Integer signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via crafted dimensions of a skin file, leading to a heap-based buffer overflow, as demonstrated using a BMP image.
Affected configurations
Node
renrenrenren_talkMatch2.9
| CPE | Name | Operator | Version |
|---|---|---|---|
| renren:renren_talk | renren renren talk | eq | 2.9 |
Related
prion
prion
Integer overflow
2012-01-24 18:55:00
cvelist
cvelist
CVE-2012-0915
2022-10-03 16:15:41
nvd
nvd
CVE-2012-0915
2012-01-24 18:55:01
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.5%
Related for CVE-2012-0915