CVE-2012-0273

Description

Multiple stack-based buffer overflows in MinaliC 2.0.0 allow remote attackers to execute arbitrary code via a (1) session_id cookie in a request to the get_cookie_value function in response.c, (2) directory name in a request to the add_default_file function in response.c, or (3) file name in a request to the retrieve_physical_file_name_or_brows function in response.c.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://secunia.com/advisories/45462
• http://secunia.com/secunia_research/2012-5
• http://www.securityfocus.com/bid/52873
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74651
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74652
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74653
• http://secunia.com/advisories/45462
• http://secunia.com/secunia_research/2012-5
• http://www.securityfocus.com/bid/52873
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74651
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74652
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74653

CWEs

CWE-119