CVE-2012-4409

🗓️ 21 Nov 2012 23:00:00Reported by redhatType

Stack-based buffer overflow in mcrypt 2.6.8 & earlier allows remote code execution via crafted encrypted file header

Reporter	Title	Published	Views	Family All 34
0day.today	mcrypt <= 2.5.8 STACK based overflow Vulnerability	24 Nov 201200:00	–	zdt
Circl	CVE-2012-4409	26 Nov 201200:00	–	circl
Cvelist	CVE-2012-4409	21 Nov 201223:00	–	cvelist
Debian CVE	CVE-2012-4409	21 Nov 201223:00	–	debiancve
Exploit DB	mcrypt 2.5.8 - Local Stack Overflow	26 Nov 201200:00	–	exploitdb
exploitpack	mcrypt 2.5.8 - Local Stack Overflow	26 Nov 201200:00	–	exploitpack
Fedora	[SECURITY] Fedora 18 Update: mcrypt-2.6.8-9.fc18	17 Sep 201222:15	–	fedora
Fedora	[SECURITY] Fedora 16 Update: mcrypt-2.6.8-10.fc16	8 Nov 201201:52	–	fedora
Fedora	[SECURITY] Fedora 16 Update: mcrypt-2.6.8-9.fc16	19 Sep 201203:11	–	fedora
Fedora	[SECURITY] Fedora 17 Update: mcrypt-2.6.8-9.fc17	26 Sep 201209:14	–	fedora

NVD

Node

mcrypt mcryptRange≤2.6.8

Source	Link
lists	www.lists.fedoraproject.org/pipermail/package-announce/2012-September/087542.html
secunia	www.secunia.com/advisories/51010
secunia	www.secunia.com/advisories/50507
lists	www.lists.fedoraproject.org/pipermail/package-announce/2012-September/088281.html
packetstormsecurity	www.packetstormsecurity.org/files/116268/mcrypt-2.6.8-Buffer-Overflow-Proof-Of-Concept.html
securitytracker	www.securitytracker.com/id
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2012/09/06/4
lists	www.lists.fedoraproject.org/pipermail/package-announce/2012-September/086519.html

29 Apr 2026 01:13Current

7.8High risk

Vulners AI Score7.8

CVSS 26.8

EPSS0.58743