CVEvulnerability

CVE-2012-0870

7.9 HIGH Published 2012-02-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-02-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.9 HIGH — AV:A/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.

Affected configurations

• samba samba 3.0.0 • rim blackberry playbook tablet • rim blackberry playbook os (<= 2.0) • rim blackberry playbook os 1.0 • rim blackberry playbook os 1.0.3 • rim blackberry playbook os 1.0.5 • rim blackberry playbook os 1.0.6 • rim blackberry playbook os 1.0.7 • rim blackberry playbook os 1.0.7.2942 • rim blackberry playbook os 1.0.7.3312 • rim blackberry playbook os 1.0.8.4985 • rim blackberry playbook os 1.0.8.6067

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References