CVE-2012-1571
6.3 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.009 Low
EPSS
Percentile
83.1%
file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
| CPE | Name | Operator | Version |
|---|---|---|---|
| christos_zoulas:file | christos zoulas file | le | 5.10 |
| tim_robbins:libmagic | tim robbins libmagic | eq | * |
References
mx.gw.com/pipermail/file/2012/000914.html
www.debian.org/security/2012/dsa-2422
www.mandriva.com/security/advisories?name=MDVSA-2012:035
www.ubuntu.com/usn/USN-2123-1
github.com/glensc/file/commit/1859fdb4e67c49c463c4e0078054335cd46ba295
github.com/glensc/file/commit/1aec04dbf8a24b8a6ba64c4f74efa0628e36db0b
Social References
More
Related
6.3 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.009 Low
EPSS
Percentile
83.1%