Vulnerability Details CVE-2012-2089
Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.038
EPSS Ranking 87.6%
CVSS Severity
CVSS v2 Score 6.8
Products affected by CVE-2012-2089
-
cpe:2.3:a:f5:nginx:1.0.10
-
cpe:2.3:a:f5:nginx:1.0.11
-
cpe:2.3:a:f5:nginx:1.0.12
-
cpe:2.3:a:f5:nginx:1.0.13
-
cpe:2.3:a:f5:nginx:1.0.14
-
-
-
-
cpe:2.3:a:f5:nginx:1.1.10
-
cpe:2.3:a:f5:nginx:1.1.11
-
cpe:2.3:a:f5:nginx:1.1.12
-
cpe:2.3:a:f5:nginx:1.1.13
-
cpe:2.3:a:f5:nginx:1.1.14
-
cpe:2.3:a:f5:nginx:1.1.15
-
cpe:2.3:a:f5:nginx:1.1.16
-
cpe:2.3:a:f5:nginx:1.1.17
-
cpe:2.3:a:f5:nginx:1.1.18
-
-
-
-
-
-
-
-
cpe:2.3:o:fedoraproject:fedora:15
-
cpe:2.3:o:fedoraproject:fedora:16
-
cpe:2.3:o:fedoraproject:fedora:17