CVE-2012-4409
mcrypt < 2.6.8 - Stack-Based Buffer Overflow via Encrypted File Header
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-4409. PoCs published by Tosh, _ishikawa.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in mcrypt <= 2.5.8 (CVE-2012-4409) by crafting a malicious encrypted file. When decrypted, it triggers arbitrary code execution via ROP chains to bypass NX and ASLR, ultimately spawning a shell.
Description
Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption.
Exploits (2)
This exploit targets a stack-based buffer overflow in mcrypt <= 2.5.8 (CVE-2012-4409) by crafting a malicious encrypted file. When decrypted, it triggers arbitrary code execution via ROP chains to bypass NX and ASLR, ultimately spawning a shell.
This exploit demonstrates a stack-based buffer overflow in mcrypt <= 2.6.8 by crafting a malicious .nc file with an overly long salt value. The PoC triggers the vulnerability in the check_file_head() function during decryption, potentially leading to arbitrary code execution.