Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2012-11-21 23:55
Updated : 2024-02-28 12:00
NVD link : CVE-2012-4409
Mitre link : CVE-2012-4409
CVE.ORG link : CVE-2012-4409
JSON object : View
Products Affected
mcrypt
- mcrypt
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer