NVD

Id
45502  
Name
CVE-2012-4024  
Description
Stack-based buffer overflow in the get_component function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted list file (aka a crafted file for the -ef option). NOTE: probably in most cases, the list file is a trusted file constructed by the program"s user; however, there are some realistic situations in which a list file would be obtained from an untrusted remote source.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-07-19  
Modified Date
2014-02-11  
Seq
2012-4024  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228485 45502 CVE-2012-4024 http://sourceforge.net/mailarchive/forum.php?thread_name=CAAoG81HL9oP8roPLLhftTSXTzSD%2BZcR66PRkVU%3Df76W3Mjde_w%40mail.gmail.com&forum_name=squashfs-devel  View
228486 45502 CVE-2012-4024 MDVSA-2013:128  View
228487 45502 CVE-2012-4024 [oss-security] 20120719 CVE-2012-4024 and CVE-2012-4025: Squashfs overflows  View
228488 45502 CVE-2012-4024 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0001  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27531 JVNDB-2012-003238 Squashfs の unsquashfs の unsquashfs.c におけるスタックベースのバッファオーバーフローの脆弱性 Squashfs の unsquashfs の unsquashfs.c 内の get_component 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2012-4024 57262 CVE-2012-4024 45502 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003238.html 2012-07-19 2012-07-23 View