CVE-2012-4426: Medium severity mcrypt mcrypt vulnerability
Published Nov 21, 2012
·Updated
Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving (1) errors.c or (2) mcrypt.c.
Affected Software
5 affected components
mcrypt mcrypt<=2.6.8
mcrypt mcrypt=2.6.4
mcrypt mcrypt=2.6.5
mcrypt mcrypt=2.6.6
mcrypt mcrypt=2.6.7
Event History
Nov 21, 2012
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4426?
CVE-2012-4426 has a medium severity rating due to the potential for denial of service and arbitrary code execution.
2
How do I fix CVE-2012-4426?
To fix CVE-2012-4426, upgrade to mcrypt version 2.6.9 or later.
3
What are the affected versions by CVE-2012-4426?
CVE-2012-4426 affects mcrypt versions 2.6.8 and earlier.
4
What kind of attacks can CVE-2012-4426 enable?
CVE-2012-4426 can enable user-assisted remote attackers to potentially cause a denial of service or execute arbitrary code.
5
What components are involved in CVE-2012-4426?
CVE-2012-4426 involves format string vulnerabilities in mcrypt's errors.c and mcrypt.c.