CVE-2012-5876

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 4.3%

from disclosure to weapon0 days

Published on NVDMay 30

1st PoCJan 10

exploitation probability

4.3%top 10% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of service (crash) via a long string in the (1) request line or (2) HTTP Referer header to TCP port 54444, which triggers a heap-based buffer overflow.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/24022unverified cve_referencewww.exploit-db.com/exploits/24022unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://archives.neohapsis.com/archives/bugtraq/2013-01/0037.html http://osvdb.org/89149 https://exchange.xforce.ibmcloud.com/vulnerabilities/81103 https://www.htbridge.com/advisory/HTB23130 http://www.exploit-db.com/exploits/24022 http://www.osvdb.org/89150 http://www.securityfocus.com/bid/57253