PT-2012-6358 · Opensuse+2 · Opensuse+2

Vincent Danen · Published 1970-01-01 · Updated 2013-06-26 · CVE-2012-4552

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PLIB version 1.8.5 openSUSE (affected versions not specified)

Description The issue concerns multiple vulnerabilities in the PLIB package of the openSUSE operating system, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. A specific vulnerability is a stack-based buffer overflow in the error function in ssg/ssgParser.cxx, allowing remote attackers to execute arbitrary code via a crafted 3d model file.

Recommendations For PLIB version 1.8.5, consider disabling the error function in ssg/ssgParser.cxx as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-05406

BDU:2015-05407

BDU:2015-05408

BDU:2015-05409

CVE-2012-4552

OPENSUSE-SU-2012_1506-1

OPENSUSE-SU-2013_0146-1

OPENSUSE-SU-2024:10308-1

Affected Products

Plib

Suse

Opensuse

References · 30

• 🔥 https://exploit-db.com/exploits/21831 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-4552 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00013.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05406 · Security Note
• https://bdu.fstec.ru/vul/2015-05408 · Security Note
• https://bdu.fstec.ru/vul/2015-05409 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091964.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091932.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01749 · Security Note
• https://bdu.fstec.ru/vul/2015-05407 · Security Note
• https://ubuntu.com/security/CVE-2012-4552 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-4552 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-4552 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00015.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-4552 · Vendor Advisory