CVE-2012-4426

Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via vectors involving 1 errors.c or 2 mcrypt.c...

UBUNTU-CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

Stack overflow

Stack-based buffer overflow in the checkfilehead function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption...

CVE-2012-4409

Stack-based buffer overflow in the checkfilehead function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption...

CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

Format string

Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via vectors involving 1 errors.c or 2 mcrypt.c...

Stack overflow

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

CVE-2012-4409

Stack-based buffer overflow in the checkfilehead function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption...

CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

CVE-2012-4426

MCrypt before and including version 2.6.8 contains multiple format-string vulnerabilities (CVE-2012-4426) that may allow a remote attacker to cause a crash or possibly execute arbitrary code via errors.c or mcrypt.c. The issue is documented across multiple sources (NVD, Debian/Ubuntu advisories, ...

CVE-2012-4527

CVE-2012-4527: MCrypt (mcrypt) up to version 2.6.8 is affected by a stack-based buffer overflow when handling long file names, enabling a user-assisted remote attacker to crash the process or potentially execute arbitrary code. The issue is documented across multiple advisories (Gentoo GLSA 20140...

CVE-2012-4409

The CVE-2012-4409 issue affects MCrypt, specifically mcrypt versions up to and including 2.6.8, due to a flaw in the check_file_head() function (extra.c). A crafted header with long salt data during decryption can trigger a stack-based buffer overflow, enabling a user-assisted remote attacker to ...

CVE-2012-4426

Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via vectors involving 1 errors.c or 2 mcrypt.c...

CVE-2012-4426

Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via vectors involving 1 errors.c or 2 mcrypt.c...

CVE-2012-4426: Use of Externally-Controlled Format String

Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via vectors involving 1 errors.c or 2 mcrypt.c...

CVE-2012-4409: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the checkfilehead function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption...

PT-2012-5460 · Mcrypt · Mcrypt

Name of the Vulnerable Software and Affected Versions: mcrypt versions 2.6.8 and earlier Description: The issue allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. It is not clear whether this is a vulnerability...

CVE-2012-4527: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

Fedora Update for mcrypt FEDORA-2012-17290

Check for the Version of mcrypt OpenVAS Vulnerability Test Fedora Update for mcrypt FEDORA-2012-17290 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...