CVE-2012-2376

EUVD-2012-2366 · Published May 21, 2012

Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM object VARIANT types, as exploited in the wild in May 2012.

Technologies

Php PhpMicrosoft Windows

Weaknesses

CWE-119

CVSS scores

v2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

http://www.exploit-db.com/exploits/18861/
http://isc.sans.edu/diary.html?storyid=13255
http://openwall.com/lists/oss-security/2012/05/20/2
http://www.securitytracker.com/id?1027089
https://bugzilla.redhat.com/show_bug.cgi?id=823464
https://exchange.xforce.ibmcloud.com/vulnerabilities/75778

Potentially impacted assets

See if this affects your attack surface