CVE Feed

    Dashboard / CVE / CVE-2012-4025

    CVE-2012-4025

    Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted block_log field in the superblock of a .sqsh file, leading to a heap-based buffer overflow.

    Published:Jul 18, 2012
    Last Modified:Apr 11, 2025
    EPS:Jul 19, 2012
    EPSS Score:0.02345
    CVSS Score:6.8

    Affected Products

    Vendor
    Squashfs Project
    Product
    Squashfs

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-190 Integer Overflow or Wraparound

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    References

    http://sourceforge.net/mailarchive/forum.php?thread_name=CAAoG81HL9oP8roPLLhftTSXTzSD%2BZcR66PRkVU%3Df76W3Mjde_w%40mail.gmail.com&forum_name=squashfs-devel
    http://www.mandriva.com/security/advisories?name=MDVSA-2013:128
    http://www.openwall.com/lists/oss-security/2012/07/19/6
    http://www.osvdb.org/83899
    http://www.securityfocus.com/bid/54610
    https://security.gentoo.org/glsa/201612-40
    https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0001
    http://sourceforge.net/mailarchive/forum.php?thread_name=CAAoG81HL9oP8roPLLhftTSXTzSD%2BZcR66PRkVU%3Df76W3Mjde_w%40mail.gmail.com&forum_name=squashfs-devel
    http://www.mandriva.com/security/advisories?name=MDVSA-2013:128
    http://www.openwall.com/lists/oss-security/2012/07/19/6
    http://www.osvdb.org/83899
    http://www.securityfocus.com/bid/54610
    https://security.gentoo.org/glsa/201612-40
    https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0001

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High