NVD

Id
43939  
Name
CVE-2012-2089  
Description
Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-04-17  
Modified Date
2012-12-28  
Seq
2012-2089  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220689 43939 CVE-2012-2089 http://nginx.org/en/security_advisories.html  View
220690 43939 CVE-2012-2089 [oss-security] 20120412 nginx security advisory: mp4 module vulnerability, CVE-2012-2089  View
220691 43939 CVE-2012-2089 nginx-ngxhttpmp4module-bo(74831)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26380 JVNDB-2012-002087 nginx の ngx_http_mp4_module.c におけるバッファオーバーフローの脆弱性 nginx の ngx_http_mp4_module モジュール内の ngx_http_mp4_module.c には、mp4 ディレクティブが利用されている際、バッファオーバーフローの脆弱性が存在します。 CVE-2012-2089 55327 CVE-2012-2089 43939 5.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002087.html 2012-04-17 2012-04-19 View