GCVE - cpe:2.3:a:mcrypt:mcrypt:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mcrypt:mcrypt:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mcrypt (`968df3de-7c01-5263-939a-764e2ec4f91f`)
Product	Mcrypt (`9bb4d05e-eb17-5d13-a305-ee9fdae4240c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-4527`	vulnerable	2026-06-08 05:02:51.160228	Details available Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability. Published: 2012-11-21T23:00:00.000Z Updated: 2024-08-06T20:42:53.677Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091206.html http://lists.opensuse.org/opensuse-updates/2012-11/msg00003.html http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091173.html http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091377.html http://www.securityfocus.com/bid/56114	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4426`	vulnerable	2026-06-08 05:02:17.433863	Details available Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving (1) errors.c or (2) mcrypt.c. Published: 2012-11-21T23:00:00.000Z Updated: 2024-08-06T20:35:09.551Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2012/09/10/5 http://www.openwall.com/lists/oss-security/2012/09/06/9 http://www.openwall.com/lists/oss-security/2012/09/13/22 http://www.securityfocus.com/bid/55557 http://www.openwall.com/lists/oss-security/2012/09/06/8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4409`	vulnerable	2026-06-08 05:02:17.317615	Details available Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption. Published: 2012-11-21T23:00:00.000Z Updated: 2024-08-06T20:35:09.525Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086519.html http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088281.html http://packetstormsecurity.org/files/116268/mcrypt-2.6.8-Buffer-Overflow-Proof-Of-Concept.html http://lists.fedoraproject.org/pipermail/package-announce/2012-September/087542.html http://www.openwall.com/lists/oss-security/2012/09/06/4	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.