CVE-2012-0870

Published: Feb 23, 2012Modified: Apr 29, 2026

7.9

Vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 5.5 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.

Affected (12)

Products: Rim: Blackberry Playbook Os, Blackberry Playbook Tablet · Samba: Samba

2 products

Blackberry Playbook Os

Blackberry Playbook Tablet

1 product

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Rim Blackberry Playbook Os	version ≤ 2.0
Rim Blackberry Playbook Os	Version 1.0.3
Rim Blackberry Playbook Os	Version 1.0.5
Rim Blackberry Playbook Os	Version 1.0.6
Rim Blackberry Playbook Os	Version 1.0.7.2942
Rim Blackberry Playbook Os	Version 1.0.7.3312
Rim Blackberry Playbook Os	Version 1.0.7
Rim Blackberry Playbook Os	Version 1.0.8.4985
Rim Blackberry Playbook Os	Version 1.0.8.6067
Rim Blackberry Playbook Os	Version 1.0
Rim Blackberry Playbook Tablet	All versions
Samba Samba	Version 3.0.0

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (28)

http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB29565

Source: secalert@redhat.com

PatchVendor Advisory

http://lists.apple.com/archives/security-announce/2012/May/msg00001.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00008.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00009.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html

Source: secalert@redhat.com

http://secunia.com/advisories/48116

Source: secalert@redhat.com

http://secunia.com/advisories/48186

Source: secalert@redhat.com

http://secunia.com/advisories/48844

Source: secalert@redhat.com

http://secunia.com/advisories/48879

Source: secalert@redhat.com

http://support.apple.com/kb/HT5281

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1374-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=795509

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/73361

Source: secalert@redhat.com

http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB29565

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://lists.apple.com/archives/security-announce/2012/May/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00008.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/48116

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/48186

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/48844

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/48879

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT5281

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1374-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=795509

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/73361

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.