Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-2089
HistoryApr 17, 2012 - 9:55 p.m.

CVE-2012-2089

2012-04-1721:55:01
CWE-120
[email protected]
web.nvd.nist.gov
7

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.024

Percentile

90.0%

JSON

Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.

Affected configurations

Nvd
Node
f5nginxRange1.0.7–1.0.14
OR
f5nginxRange1.1.3–1.1.18
Node
fedoraprojectfedoraMatch15
OR
fedoraprojectfedoraMatch16
OR
fedoraprojectfedoraMatch17
VendorProductVersionCPE
f5nginx*cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*
fedoraprojectfedora15cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*
fedoraprojectfedora16cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*
fedoraprojectfedora17cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*

Related

cve 1
nessus 9
prion 1
openvas 13
cvelist 1
freebsd 1
gentoo 1
debian 1
seebug 1
amazon 1
fedora 3
debiancve 1
nginx 1
ubuntucve 1
osv 1
cve
cve
CVE-2012-2089
2012-04-17 21:55:01
nessus
nessus
Fedora 17 : nginx-1.0.15-2.fc17 (2012-6238)
2012-04-30 00:00:00
Amazon Linux AMI : nginx (ALAS-2012-74)
2013-09-04 00:00:00
nginx < 1.0.15 / 1.1.x < 1.1.19 Buffer-Overflow Vulnerability
2012-04-17 00:00:00
prion
prion
Buffer overflow
2012-04-17 21:55:00
openvas
openvas
Fedora Update for nginx FEDORA-2012-6238
2012-08-30 00:00:00
nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
2012-04-17 00:00:00
Amazon Linux: Security Advisory (ALAS-2012-74)
2015-09-08 00:00:00
cvelist
cvelist
CVE-2012-2089
2012-04-17 21:00:00
freebsd
freebsd
nginx -- Buffer overflow in the ngx_http_mp4_module
2012-04-12 00:00:00
gentoo
gentoo
nginx: User-assisted execution of arbitrary code
2012-06-21 00:00:00
debian
debian
[BSA-069] Security Update for NGINX
2012-04-24 10:10:16
seebug
seebug
nginx 'ngx_http_mp4_module.c'ηΌ“ε†²εŒΊζΊ’ε‡ΊζΌζ΄ž
2012-04-15 00:00:00
amazon
amazon
Important: nginx
2012-05-08 23:12:00
fedora
fedora
[SECURITY] Fedora 17 Update: nginx-1.0.15-2.fc17
2012-04-29 01:00:18
[SECURITY] Fedora 15 Update: nginx-1.0.15-1.fc15
2012-05-01 00:55:14
[SECURITY] Fedora 16 Update: nginx-1.0.15-1.fc16
2012-05-01 00:54:13
debiancve
debiancve
CVE-2012-2089
2012-04-17 21:55:01
nginx
nginx
Buffer overflow in the ngx_http_mp4_module
2012-04-17 21:55:01
ubuntucve
ubuntucve
CVE-2012-2089
2012-04-17 00:00:00
osv
osv
nginx-1.11.4-2.5 on GA media
2024-06-15 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.024

Percentile

90.0%

JSON
Related for NVD:CVE-2012-2089
cve1nessus9prion1openvas13cvelist1freebsd1gentoo1debian1seebug1amazon1fedora3debiancve1nginx1ubuntucve1osv1