CVE-2012-4054

Published: Jul 25, 2012Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the readfile function in CPE17 Autorun Killer 1.7.1 and earlier allows physically proximate attackers to execute arbitrary code via a crafted inf file.

Affected (1)

Products: Cpe17: Autorun Killer

Cpe17

1 product

Autorun Killer

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cpe17 Autorun Killer	Up to 1.7.1

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (8)

http://osvdb.org/81496

Source: cve@mitre.org

http://www.exploit-db.com/exploits/18792

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/53286

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/75238

Source: cve@mitre.org

http://osvdb.org/81496

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.exploit-db.com/exploits/18792

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/53286

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/75238

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.