CVE-2012-4415 Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole before 0.6.3 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a lo...
HighCVSS 7.5
EPSS 13.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole before 0.6.3 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long protocol name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fedoraproject fedora | = 16 | No fix listed |
| fedoraproject fedora | = 17 | No fix listed |
| guac-dev guacamole | <= 0.6.2 | No fix listed |
| guac-dev guacamole | = 0.5.0 | No fix listed |
| guac-dev guacamole | = 0.6.0 | No fix listed |
References
- 20120924 CVE-2012-4415: guacamole local root vulnerability exploit mailing-list
- guac-dev.org patch
- FEDORA-2012-13914 vendor-advisory
- FEDORA-2012-14179 vendor-advisory
- FEDORA-2012-14097 vendor-advisory
- [oss-security] 20120911 CVE id request: guacd mailing-list
- [oss-security] 20120911 Re: CVE id request: guacd mailing-list
- 55497 exploit vdb-entry
- bugzilla.redhat.com