CVE-2012-2224

high
Published 2012-04-11 · Modified 2026-04-29
CVSS v3
CVSS v2
7.5
VIR risk
7.5

Description

Xunlei Thunder before 7.2.6 allows remote attackers to execute arbitrary code via a crafted file, related to a "DLL injection vulnerability."

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — http://safe.xunlei.com/announce/xl20120306.html

Application impact

VendorProductVersionsFixed
xunleithunder7.2.6

References

CWEs

CWE-94

Verify integrity in audit chain (admin only). AS-IS.