CVE-2012-5876 Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of service (crash) via a long string in the (1) request line or (2...
MediumCVSS 5.0
EPSS 4.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of service (crash) via a long string in the (1) request line or (2) HTTP Referer header to TCP port 54444, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nero mediahome | <= 4.5.8.0 | No fix listed |
References
- 20130109 Nero MediaHome Multiple Remote DoS Vulnerabilities mailing-list
- 89149 vdb-entry
- 24022 exploit
- 89150 vdb-entry
- 57253 exploit vdb-entry
- mediahome-nmmediaserver-dos(81103) vdb-entry
- www.htbridge.com