CVE-2012-4330
high
CVSS v3
—
CVSS v2
7.8
VIR risk
7.8
Description
The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long string in certain fields, as demonstrated by the MAC address field, possibly a buffer overflow.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
References
- http://aluigi.org/adv/samsux_1-adv.txt
- http://archives.neohapsis.com/archives/bugtraq/2012-04/0142.html
- http://www.exploit-db.com/exploits/18751
- http://www.osvdb.org/81222
- http://www.securityfocus.com/bid/53161
- http://www.securitytracker.com/id?1026976
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74928
- http://aluigi.org/adv/samsux_1-adv.txt
- http://archives.neohapsis.com/archives/bugtraq/2012-04/0142.html
- http://www.exploit-db.com/exploits/18751
- http://www.osvdb.org/81222
- http://www.securityfocus.com/bid/53161
- http://www.securitytracker.com/id?1026976
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74928
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.