CVE ID:	CVE-2012-4527
Description:	Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user- assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4527 56114 http://www.securityfocus.com/bid/56114 FEDORA-2012-17290 http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091206.html FEDORA-2012-17318 http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091173.html FEDORA-2012-17339 http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091377.html [oss-security] 20121018 CVE Request -- mcrypt: stack-based buffer overflow by encryption / decryption of overly long file names http://www.openwall.com/lists/oss-security/2012/10/18/9 [oss-security] 20121018 Re: CVE Request -- mcrypt: stack-based buffer overflow by encryption / decryption of overly long file names http://www.openwall.com/lists/oss-security/2012/10/18/12 [oss-security] 20121119 Re: CVE Request -- mcrypt: stack-based buffer overflow by encryption / decryption of overly long file names http://www.openwall.com/lists/oss-security/2012/11/20/1 https://bugzilla.redhat.com/show_bug.cgi?id=867790 https://bugzilla.redhat.com/show_bug.cgi?id=867790 openSUSE-SU-2012:1440 http://lists.opensuse.org/opensuse-updates/2012-11/msg00003.html