Nginx Buffer Copy without Checking Size of Input (Classic Buffer Overflow) Vulnerability - CVE-2012-2089 - Vulnerability Database

Nginx

Nginx Buffer Copy without Checking Size of Input (Classic Buffer Overflow) Vulnerability - CVE-2012-2089

Medium

Reference: CVE-2012-2089

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-2089

Title: Nginx Buffer Copy without Checking Size of Input (Classic Buffer Overflow) Vulnerability

Overview:

Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18 when the mp4 directive is used allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.