CVE-2012-4412
glibc < 2.17 - Heap-Based Buffer Overflow via Long String in strcoll_l
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-4412. PoCs published by Jan iankko Lieskovsky, gitcollect.
AI-analyzed exploit summary This exploit demonstrates an integer overflow in GNU glibc's strcoll function when processing large strings in certain locales, leading to a buffer overflow. The PoC allocates a large buffer and triggers the overflow via strcoll, potentially allowing arbitrary code execution.
Description
Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow.
Exploits (2)
This exploit demonstrates an integer overflow in GNU glibc's strcoll function when processing large strings in certain locales, leading to a buffer overflow. The PoC allocates a large buffer and triggers the overflow via strcoll, potentially allowing arbitrary code execution.
This PoC demonstrates a heap-based buffer overflow in the strcoll function when processing large strings with specific locale settings (en_GB.UTF-8). The exploit allocates a large buffer (429496730 bytes) and fills it with 'x' characters, triggering the vulnerability.