Lucene search

K
cve[email protected]CVE-2012-2118
HistoryMay 18, 2012 - 10:55 p.m.

CVE-2012-2118

2012-05-1822:55:03
CWE-20
web.nvd.nist.gov
29
cve
2012
2118
format string vulnerability
x.org x11 1.11
logvhdrmessageverb function
denial of service
arbitrary code execution

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

88.9%

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name.

Affected configurations

NVD
Node
x.orgx11Match1.11
CPENameOperatorVersion
x.org:x11x.org x11eq1.11

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

88.9%