NVD

Id
45503  
Name
CVE-2012-4025  
Description
Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted block_log field in the superblock of a .sqsh file, leading to a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-07-19  
Modified Date
2014-02-11  
Seq
2012-4025  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228489 45503 CVE-2012-4025 http://sourceforge.net/mailarchive/forum.php?thread_name=CAAoG81HL9oP8roPLLhftTSXTzSD%2BZcR66PRkVU%3Df76W3Mjde_w%40mail.gmail.com&forum_name=squashfs-devel  View
228490 45503 CVE-2012-4025 MDVSA-2013:128  View
228491 45503 CVE-2012-4025 [oss-security] 20120719 CVE-2012-4024 and CVE-2012-4025: Squashfs overflows  View
228492 45503 CVE-2012-4025 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0001  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27532 JVNDB-2012-003239 Squashfs の unsquashfs の unsquashfs.c における整数オーバーフローの脆弱性 Squashfs の unsquashfs の unsquashfs.c 内の queue_init 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2012-4025 57263 CVE-2012-4025 45503 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003239.html 2012-07-19 2012-07-23 View