CVE-2012-2427

2022-10-0316:15:37

icscert

www.cve.org

cve-2012-2427

buffer overflow

xarrow

remote attackers

arbitrary code

invalid free operation

8.1 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.5%

JSON

Heap-based buffer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via packets that trigger an invalid free operation.

References

www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf