What is CVE-2012-2376?

CVE-2012-2376 is a vulnerability in Microsoft Windows, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2012-05-21.

Is CVE-2012-2376 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Microsoft Windows

CVE-2012-2376

Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM object VARIANT types, as exploited in the wild in May 2012.

Vulnerability class: Buffer Overflow

EPSS: 0.201 (97.2th percentile) — read the EPSS interpretation.

Affected products

Microsoft Windows
Php — versions 1.0, 2.0, 2.0b10
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

secalert@redhat.com (x_refsource_MISC)
secalert@redhat.com (vdb-entry, x_refsource_XF)
secalert@redhat.com (Exploit, exploit, x_refsource_EXPLOIT-DB)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2012-2376?: CVE-2012-2376 is a vulnerability in Microsoft Windows, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2012-05-21.
Is CVE-2012-2376 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.