CVE-2012-4025: Buffer Overflow
Published Jul 19, 2012
·Updated
Integer overflow in the queueinit function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted blocklog field in the superblock of a .sqsh file, leading to a heap-based buffer overflow.
Affected Software
1 affected component
Squashfs Project Squashfs<=4.2
Event History
Jul 19, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4025?
CVE-2012-4025 is classified as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2012-4025?
To mitigate CVE-2012-4025, upgrade to Squashfs version 4.3 or later.
3
Who is affected by CVE-2012-4025?
CVE-2012-4025 affects all versions of Squashfs up to and including 4.2.
4
What type of attack does CVE-2012-4025 enable?
CVE-2012-4025 enables remote attackers to execute arbitrary code via a specially crafted .sqsh file.
5
What component of Squashfs is vulnerable in CVE-2012-4025?
The vulnerability in CVE-2012-4025 resides in the queue_init function located in unsquashfs.c.