CVE-2012-2276

EMC Documentum Information Rights Management - Denial of Service via Invalid FIPS Fields or Version Number

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-2276. PoCs published by Luigi Auriemma.

AI-analyzed exploit summary The document describes multiple vulnerabilities in EMC IRM License Server, including NULL pointer dereferences and process freezing due to malformed commands. It provides an analysis of the bugs but does not include actual exploit code.

Description

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via input data that (1) lacks FIPS fields or (2) has an invalid version number.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Luigi Auriemma · textdoshardware
https://www.exploit-db.com/exploits/18734

The document describes multiple vulnerabilities in EMC IRM License Server, including NULL pointer dereferences and process freezing due to malformed commands. It provides an analysis of the bugs but does not include actual exploit code.

Classification
Writeup 90%
Attack Type
Dos
Complexity
Moderate
Reliability
Theoretical
Target: EMC IRM License Server <= 4.6.1.1995
No auth needed
Prerequisites: Network access to the target server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/522682
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/75553
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48690
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/18734
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/53475
Various Sources x_refsource_misc
http://aluigi.org/adv/irm_1-adv.txt
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027058

Scores

EPSS 0.0907
EPSS Percentile 94.6%

Details

CWE
CWE-119
Status published
Products (2)
emc/documentum_information_rights_management 4
emc/documentum_information_rights_management 5
Published May 14, 2012
Tracked Since Feb 18, 2026