Lucene search

K
cve[email protected]CVE-2012-2118
HistoryMay 18, 2012 - 10:55 p.m.

CVE-2012-2118

2012-05-1822:55:00
CWE-20
web.nvd.nist.gov
28
cve
2012
2118
format string vulnerability
x.org x11 1.11
logvhdrmessageverb function
denial of service
arbitrary code execution

7.6 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.02 Low

EPSS

Percentile

88.7%

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name.

CPENameOperatorVersion
x.org:x11x.org x11eq1.11

7.6 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.02 Low

EPSS

Percentile

88.7%