cve/2012/CVE-2012-2276.md

19 lines
782 B
Markdown
Raw Normal View History

2024-05-26 14:27:05 +02:00
### [CVE-2012-2276](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2276)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via input data that (1) lacks FIPS fields or (2) has an invalid version number.
### POC
#### Reference
- http://aluigi.org/adv/irm_1-adv.txt
- http://www.exploit-db.com/exploits/18734
#### Github
No PoCs found on GitHub currently.