onyx --cves cve-2012-2089
CVE-2012-2089
- score
- <0.1
- cvss
- 6.8
- epss
- 9.8%
- published
- 2012-04-17
- kev added
- —
- first seen
nginx versions 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18 contain a buffer overflow caused by crafted MP4 files in the ngx_http_mp4_module, letting remote attackers cause denial of service or execute arbitrary code, exploit requires processing malicious MP4 files.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 8
- http://www.securitytracker.com/id?1026924
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74831
- http://nginx.org/en/security_advisories.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079388.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079467.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079474.html
- http://www.openwall.com/lists/oss-security/2012/04/12/9
- http://www.securityfocus.com/bid/52999