Mcrypt

mcrypt

Vendor: Mcrypt • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-4527 1Mcrypt 1Mcrypt Apr 29, 2026 Nov 21, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether...Show more Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability.Show less
CVE-2012-4426 1Mcrypt 1Mcrypt Apr 29, 2026 Nov 21, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving (1) errors.c or...Show more Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving (1) errors.c or (2) mcrypt.c.Show less
CVE-2012-4409 1Mcrypt 1Mcrypt Apr 29, 2026 Nov 21, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing lo...Show more Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption.Show less