CVE-2012-0870

Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*
cpe:2.3:h:rim:blackberry_playbook_tablet:-:*:*:*:*:*:*:*
cpe:2.3:o:rim:blackberry_playbook_os:*:*:*:*:*:*:*:*
cpe:2.3:o:rim:blackberry_playbook_os:1.0:*:*:*:*:*:*:*
cpe:2.3:o:rim:blackberry_playbook_os:1.0.3:*:*:*:*:*:*:*
cpe:2.3:o:rim:blackberry_playbook_os:1.0.5:*:*:*:*:*:*:*
cpe:2.3:o:rim:blackberry_playbook_os:1.0.6:*:*:*:*:*:*:*
cpe:2.3:o:rim:blackberry_playbook_os:1.0.7:*:*:*:*:*:*:*
cpe:2.3:o:rim:blackberry_playbook_os:1.0.7.2942:*:*:*:*:*:*:*
cpe:2.3:o:rim:blackberry_playbook_os:1.0.7.3312:*:*:*:*:*:*:*
cpe:2.3:o:rim:blackberry_playbook_os:1.0.8.4985:*:*:*:*:*:*:*
cpe:2.3:o:rim:blackberry_playbook_os:1.0.8.6067:*:*:*:*:*:*:*

History

13 Feb 2023, 04:32

Type Values Removed Values Added
Summary CVE-2012-0870 samba: Any Batched ("AndX") request processing infinite recursion and heap-based buffer overflow Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.
References
  • {'url': 'https://access.redhat.com/errata/RHSA-2012:0332', 'name': 'https://access.redhat.com/errata/RHSA-2012:0332', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/security/cve/CVE-2012-0870', 'name': 'https://access.redhat.com/security/cve/CVE-2012-0870', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'http://www.samba.org/samba/security/CVE-2012-0870', 'name': 'http://www.samba.org/samba/security/CVE-2012-0870', 'tags': [], 'refsource': 'MISC'}

02 Feb 2023, 18:15

Type Values Removed Values Added
Summary Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion. CVE-2012-0870 samba: Any Batched ("AndX") request processing infinite recursion and heap-based buffer overflow
References
  • (MISC) https://access.redhat.com/errata/RHSA-2012:0332 -
  • (MISC) https://access.redhat.com/security/cve/CVE-2012-0870 -
  • (MISC) http://www.samba.org/samba/security/CVE-2012-0870 -

Information

Published : 2012-02-23 12:33

Updated : 2023-12-10 11:03


NVD link : CVE-2012-0870

Mitre link : CVE-2012-0870

CVE.ORG link : CVE-2012-0870


JSON object : View

Products Affected

rim

  • blackberry_playbook_tablet
  • blackberry_playbook_os

samba

  • samba
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer