CVE-2012-2276

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 9.1%

from disclosure to weapon0 days

Published on NVDMay 14

1st PoCApr 12

exploitation probability

9.1%top 5% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via input data that (1) lacks FIPS fields or (2) has an invalid version number.

Affected products

n/a · n/a

public PoCs found — 2✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/18734 cve_referencewww.exploit-db.com/exploits/18734unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://aluigi.org/adv/irm_1-adv.txt http://secunia.com/advisories/48690 https://exchange.xforce.ibmcloud.com/vulnerabilities/75553 http://www.exploit-db.com/exploits/18734 http://www.securityfocus.com/archive/1/522682 http://www.securityfocus.com/bid/53475 http://www.securitytracker.com/id?1027058