Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2012-3406
Description:The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.
Test IDs: 1.3.6.1.4.1.25623.1.0.71435   1.3.6.1.4.1.25623.1.0.72382   1.3.6.1.4.1.25623.1.0.123859   1.3.6.1.4.1.25623.1.0.881175   1.3.6.1.4.1.25623.1.0.870788   1.3.6.1.4.1.25623.1.1.4.2012.1488.1   1.3.6.1.4.1.25623.1.1.4.2013.1251.1   1.3.6.1.4.1.25623.1.1.4.2012.1666.1  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2012-3406
https://security.gentoo.org/glsa/201503-04
http://www.openwall.com/lists/oss-security/2012/07/11/17
RedHat Security Advisories: RHSA-2012:1097
http://rhn.redhat.com/errata/RHSA-2012-1097.html
RedHat Security Advisories: RHSA-2012:1098
http://rhn.redhat.com/errata/RHSA-2012-1098.html
RedHat Security Advisories: RHSA-2012:1185
http://rhn.redhat.com/errata/RHSA-2012-1185.html
RedHat Security Advisories: RHSA-2012:1200
http://rhn.redhat.com/errata/RHSA-2012-1200.html
http://www.ubuntu.com/usn/USN-1589-1




© 1998-2021 E-Soft Inc. All rights reserved.