CVE-2012-4409

Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mcrypt:mcrypt:*:*:*:*:*:*:*:*
cpe:2.3:a:mcrypt:mcrypt:2.6.4:*:*:*:*:*:*:*
cpe:2.3:a:mcrypt:mcrypt:2.6.5:*:*:*:*:*:*:*
cpe:2.3:a:mcrypt:mcrypt:2.6.6:*:*:*:*:*:*:*
cpe:2.3:a:mcrypt:mcrypt:2.6.7:*:*:*:*:*:*:*

History

No history.

Information

Published : 2012-11-21 23:55

Updated : 2024-02-28 12:00


NVD link : CVE-2012-4409

Mitre link : CVE-2012-4409

CVE.ORG link : CVE-2012-4409


JSON object : View

Products Affected

mcrypt

  • mcrypt
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer