NetSight
IP …
medium6.8

CVE-2012-0060

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary co…

Impact

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Affected products

VendorProductAffected versions
RpmRpm
through 4.9.1.2
Versions 1.2, 1.3, 1.3.1, 1.4, 1.4.1

Weakness classification

CWE-20

References