Back to Database
Status published
Unknown
CVE-2012-1571
file before 5.11 and libmagic allow remote attackers to cause...
Vulnerability Description
file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-1571
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.debian.org/security/2012/dsa-2422
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:035
- https://github.com/glensc/file/commit/1aec04dbf8a24b8a6ba64c4f74efa0628e36db0b
- http://mx.gw.com/pipermail/file/2012/000914.html
- https://github.com/glensc/file/commit/1859fdb4e67c49c463c4e0078054335cd46ba295
- http://www.ubuntu.com/usn/USN-2123-1
More from christos zoulas
View All →CVE-2014-3587
Integer overflow in the cdf_read_property_info function in cdf.c in file...
Medium
4.3
CVE-2014-3538
file before 5.19 does not properly restrict the amount of...
Medium
5
CVE-2014-3478
Buffer overflow in the mconvert function in softmagic.c in file...
Unknown
0
CVE-2014-0207
The cdf_read_short_sector function in cdf.c in file before 5.19, as...
Unknown
0
CVE-2013-7345
The BEGIN regular expression in the awk script detector in...
Medium
5
Affected Vendor
christos zoulas
View all reports →Affected Software
file, libmagic
Vulnerable Versions:
0
Timeline
Official Publish:
July 17th, 2012
Last Modified:
December 4th, 2025
Added to House:
July 19th, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.