CVE-2012-5667

GNU Grep < 2.11 - Remote Code Execution via Integer Overflow

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-5667. PoCs published by Joshua Rogers.

AI-analyzed exploit summary The exploit demonstrates an integer overflow vulnerability in Grep <2.11, causing a segmentation fault via crafted input. It provides two methods to trigger the bug using Perl-generated strings.

Description

Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Joshua Rogers · textdoslinux

https://www.exploit-db.com/exploits/23779

View Code ZIP pw:eip

The exploit demonstrates an integer overflow vulnerability in Grep <2.11, causing a segmentation fault via crafted input. It provides two methods to trigger the bug using Perl-generated strings.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: Grep <2.11

No auth needed

Prerequisites: Local access to a system with vulnerable Grep version

MITRE ATT&CK