NetSight
IP …
medium6.8

CVE-2012-0061

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a de…

Impact

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.

Affected products

VendorProductAffected versions
RpmRpm
through 4.9.1.2
Versions 1.2, 1.3, 1.3.1, 1.4, 1.4.1

Weakness classification

CWE-20

References