CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-4025

Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted block_log field in the superblock of a .sqsh file, leading to a heap-based buffer overflow.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.023

EPSS Ranking 84.2%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2012-4025

Squashfs Project » Squashfs » Version: 1.3

cpe:2.3:a:squashfs_project:squashfs:1.3
Squashfs Project » Squashfs » Version: 2.0

cpe:2.3:a:squashfs_project:squashfs:2.0
Squashfs Project » Squashfs » Version: 2.1

cpe:2.3:a:squashfs_project:squashfs:2.1
Squashfs Project » Squashfs » Version: 2.2

cpe:2.3:a:squashfs_project:squashfs:2.2
Squashfs Project » Squashfs » Version: 3.0

cpe:2.3:a:squashfs_project:squashfs:3.0
Squashfs Project » Squashfs » Version: 3.1

cpe:2.3:a:squashfs_project:squashfs:3.1
Squashfs Project » Squashfs » Version: 3.2

cpe:2.3:a:squashfs_project:squashfs:3.2
Squashfs Project » Squashfs » Version: 3.3

cpe:2.3:a:squashfs_project:squashfs:3.3
Squashfs Project » Squashfs » Version: 3.4

cpe:2.3:a:squashfs_project:squashfs:3.4
Squashfs Project » Squashfs » Version: 4.0

cpe:2.3:a:squashfs_project:squashfs:4.0
Squashfs Project » Squashfs » Version: 4.1

cpe:2.3:a:squashfs_project:squashfs:4.1
Squashfs Project » Squashfs » Version: 4.2

cpe:2.3:a:squashfs_project:squashfs:4.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-4025

Products

Pricing

Contact Us