Lucene search

K
cve[email protected]CVE-2012-1571
HistoryJul 17, 2012 - 9:55 p.m.

CVE-2012-1571

2012-07-1721:55:01
CWE-119
web.nvd.nist.gov
132
4
cve-2012-1571
file before 5.11
libmagic
denial of service
crash
composite document file
cdf
nvd
security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

8.8 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.2%

file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.

Affected configurations

NVD
Node
christos_zoulasfileRange5.10
OR
tim_robbinslibmagic

Social References

More

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

8.8 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.2%