CVE-2012-2965: Input Validation

Q: What is the severity of CVE-2012-2965?

The severity of CVE-2012-2965 has not been explicitly assigned but involves potential remote attack vectors due to improper variable handling.

Q: How do I fix CVE-2012-2965?

To fix CVE-2012-2965, update the Caucho Resin software to version 4.0.29 or later.

Q: What versions of Caucho Resin are affected by CVE-2012-2965?

CVE-2012-2965 affects Caucho Resin versions prior to 4.0.29 and specific versions from 2.0.0 to 4.0.28.

Q: What is the impact of CVE-2012-2965?

The impact of CVE-2012-2965 is related to HTTP parameter contamination, which may lead to undefined behavior.

Q: Is there a known exploit for CVE-2012-2965?

As of now, there are no known public exploits for CVE-2012-2965, but it has remote attack vectors.

Published Aug 12, 2012

Updated

Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.

Affected Software

89 affected componentsFixes available

Caucho Resin<=4.0.28

Caucho Resin=2.0.0

Caucho Resin=2.0.1

Caucho Resin=2.0.2

Caucho Resin=2.0.3

Caucho Resin=2.0.4

Caucho Resin=2.0.5

Caucho Resin=2.1.0

Caucho Resin=2.1.1

Caucho Resin=2.1.2

Caucho Resin=2.1.3

Caucho Resin=2.1.4

Caucho Resin=2.1.5

Caucho Resin=2.1.6

Caucho Resin=2.1.7

Caucho Resin=2.1.8

Caucho Resin=2.1.9

Caucho Resin=2.1.10

Caucho Resin=2.1.11

Caucho Resin=2.1.12

Caucho Resin=2.1.13

Caucho Resin=2.1.14

Caucho Resin=2.1.15

Caucho Resin=2.1.16

Caucho Resin=2.1.snap

Caucho Resin=3.0.0

Caucho Resin=3.0.1-beta

Caucho Resin=3.0.2-beta

Caucho Resin=3.0.3

Caucho Resin=3.0.4

Caucho Resin=3.0.5

Caucho Resin=3.0.6

Caucho Resin=3.0.7

Caucho Resin=3.0.8

Caucho Resin=3.0.9

Caucho Resin=3.0.10

Caucho Resin=3.0.11

Caucho Resin=3.0.12

Caucho Resin=3.0.13

Caucho Resin=3.0.14

Caucho Resin=3.0.15

Caucho Resin=3.0.16

Caucho Resin=3.0.17

Caucho Resin=3.0.18

Caucho Resin=3.0.19

Caucho Resin=3.0.20

Caucho Resin=3.1.0

Caucho Resin=3.1.1

Caucho Resin=3.1.2

Caucho Resin=3.1.3

Caucho Resin=3.1.4

Caucho Resin=3.1.5

Caucho Resin=3.1.6

Caucho Resin=3.1.7

Caucho Resin=3.1.8

Caucho Resin=3.1.9

Caucho Resin=3.1.10

Caucho Resin=3.1.11

Caucho Resin=3.1.12

Caucho Resin=3.1.13

Caucho Resin=4.0.0

Caucho Resin=4.0.1

Caucho Resin=4.0.2

Caucho Resin=4.0.3

Caucho Resin=4.0.4

Caucho Resin=4.0.5

Caucho Resin=4.0.6

Caucho Resin=4.0.7

Caucho Resin=4.0.8

Caucho Resin=4.0.9

Caucho Resin=4.0.10

Caucho Resin=4.0.11

Caucho Resin=4.0.12

Caucho Resin=4.0.13

Caucho Resin=4.0.14

Caucho Resin=4.0.15

Caucho Resin=4.0.16

Caucho Resin=4.0.17

Caucho Resin=4.0.18

Caucho Resin=4.0.19

Caucho Resin=4.0.20

Caucho Resin=4.0.21

Caucho Resin=4.0.22

Caucho Resin=4.0.23

Caucho Resin=4.0.24

Caucho Resin=4.0.25

Caucho Resin=4.0.26

Caucho Resin=4.0.27

maven/com.caucho:resin<4.0.29

4.0.29

Event History

Aug 12, 2012

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

May 17, 2022

Advisory Published

via GitHub·05:23 AM

Data Sourced

via GitHub·05:23 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2012-2965?

The severity of CVE-2012-2965 has not been explicitly assigned but involves potential remote attack vectors due to improper variable handling.

How do I fix CVE-2012-2965?

To fix CVE-2012-2965, update the Caucho Resin software to version 4.0.29 or later.

What versions of Caucho Resin are affected by CVE-2012-2965?