Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2012-2089

Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.038
EPSS Ranking 87.6%
CVSS Severity
CVSS v2 Score 6.8
References
Products affected by CVE-2012-2089
  • F5 » Nginx » Version: 1.0.10
    cpe:2.3:a:f5:nginx:1.0.10
  • F5 » Nginx » Version: 1.0.11
    cpe:2.3:a:f5:nginx:1.0.11
  • F5 » Nginx » Version: 1.0.12
    cpe:2.3:a:f5:nginx:1.0.12
  • F5 » Nginx » Version: 1.0.13
    cpe:2.3:a:f5:nginx:1.0.13
  • F5 » Nginx » Version: 1.0.14
    cpe:2.3:a:f5:nginx:1.0.14
  • F5 » Nginx » Version: 1.0.7
    cpe:2.3:a:f5:nginx:1.0.7
  • F5 » Nginx » Version: 1.0.8
    cpe:2.3:a:f5:nginx:1.0.8
  • F5 » Nginx » Version: 1.0.9
    cpe:2.3:a:f5:nginx:1.0.9
  • F5 » Nginx » Version: 1.1.10
    cpe:2.3:a:f5:nginx:1.1.10
  • F5 » Nginx » Version: 1.1.11
    cpe:2.3:a:f5:nginx:1.1.11
  • F5 » Nginx » Version: 1.1.12
    cpe:2.3:a:f5:nginx:1.1.12
  • F5 » Nginx » Version: 1.1.13
    cpe:2.3:a:f5:nginx:1.1.13
  • F5 » Nginx » Version: 1.1.14
    cpe:2.3:a:f5:nginx:1.1.14
  • F5 » Nginx » Version: 1.1.15
    cpe:2.3:a:f5:nginx:1.1.15
  • F5 » Nginx » Version: 1.1.16
    cpe:2.3:a:f5:nginx:1.1.16
  • F5 » Nginx » Version: 1.1.17
    cpe:2.3:a:f5:nginx:1.1.17
  • F5 » Nginx » Version: 1.1.18
    cpe:2.3:a:f5:nginx:1.1.18
  • F5 » Nginx » Version: 1.1.3
    cpe:2.3:a:f5:nginx:1.1.3
  • F5 » Nginx » Version: 1.1.4
    cpe:2.3:a:f5:nginx:1.1.4
  • F5 » Nginx » Version: 1.1.5
    cpe:2.3:a:f5:nginx:1.1.5
  • F5 » Nginx » Version: 1.1.6
    cpe:2.3:a:f5:nginx:1.1.6
  • F5 » Nginx » Version: 1.1.7
    cpe:2.3:a:f5:nginx:1.1.7
  • F5 » Nginx » Version: 1.1.8
    cpe:2.3:a:f5:nginx:1.1.8
  • F5 » Nginx » Version: 1.1.9
    cpe:2.3:a:f5:nginx:1.1.9
  • Fedoraproject » Fedora » Version: 15
    cpe:2.3:o:fedoraproject:fedora:15
  • Fedoraproject » Fedora » Version: 16
    cpe:2.3:o:fedoraproject:fedora:16
  • Fedoraproject » Fedora » Version: 17
    cpe:2.3:o:fedoraproject:fedora:17


Contact Us

Shodan ® - All rights reserved