ID:4452 - Exploit for Input validation error in grep - CVE-2012-5667

 
Main Vulnerability Database Exploits ID:4452 - Exploit for Input validation error in grep - CVE-2012-5667

ID:4452 - Exploit for Input validation error in grep - CVE-2012-5667

Published: August 11, 2020


Vulnerability identifier: #VU43215
Vulnerability risk: Medium
CVE-ID: CVE-2012-5667
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
grep

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow.


Remediation

Install update from vendor's website.