Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2012-4552

Published: 18/11/2012 Updated: 26/06/2013
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Plib

Vulnerability Summary

Stack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote malicious users to execute arbitrary code via a crafted 3d model file that triggers a long error message, as demonstrated by a .ase file.

Vulnerable Product Search on Vulmon Subscribe to Product

steve j baker plib 1.8.5

Vendor Advisories

Debian CVElist Bug Report Logs: plib: CVE-2012-4552
Debian Bug report logs - #694810 plib: CVE-2012-4552 Package: plib; Maintainer for plib is Debian QA Group <packages@qadebianorg>; Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Fri, 30 Nov 2012 15:21:02 UTC Severity: grave Tags: patch Found in version 185-5 Fixed in version plib/185-6 Done: Michael S ...

Exploits

Exploit DB: PLIB 1.8.5 - 'ssg/ssgParser.cxx' Local Buffer Overflow
/* # Exploit Title: Plib + flightgear 3dconvert exploit # Date: 08/10/2012 # Author: Andres Gomez # Software Links: # Plib: plibsourceforgenet/ # flightgear: wwwflightgearorg/ # 3dconvert: ftp://ftpihguni-duisburgde/FlightGear/Win32/old/3dconvert-win32zip # Version: Plib 185 # Tested on: Windows XP Service Pack 3 Spanish * ...

References

CWE-119http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091937.htmlhttp://www.openwall.com/lists/oss-security/2012/10/29/9https://bugzilla.redhat.com/show_bug.cgi?id=871187http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091932.htmlhttp://www.osvdb.org/87001http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091964.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-11/msg00013.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-01/msg00015.htmlhttp://secunia.com/advisories/51340https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694810https://nvd.nist.govhttps://www.exploit-db.com/exploits/21831/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32886insecure direct object referenceCVE-2024-34342file inclusionCVE-2024-34562CVE-2024-34347CVE-2024-26026CVE-2024-4647unprivileged
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook