Staging Environment: Content and features may be unstable or change without notice.
Advisory details: ubuntu_osv / UBUNTU-CVE-2012-5875
Advisory ID ubuntu_osv/UBUNTU-CVE-2012-5875
Aliases CVE-2012-5875
Summary Firefly Media Server 1.0.0.1359 allows remote attackers to cause a denial of service (NULL pointer dereference) via a (1) crafted Connection HTTP header; a return carriage control character in the (2) Accept Language header, (3) User-agent header, (4) Host header, or (5) protocol version; or a (6) crafted HTTP protocol version.
Status Published
Exploitability 2.0
Weighted Severity 6.2
Risk 10.0
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
ubuntu-priority medium https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2012/UBUNTU-CVE-2012-5875.json
Reference id Reference type URL
http://archives.neohapsis.com/archives/bugtraq/2012-12/0115.html
https://ubuntu.com/security/CVE-2012-5875
https://www.cve.org/CVERecord?id=CVE-2012-5875
https://www.htbridge.com/advisory/HTB23129
http://www.exploit-db.com/exploits/23574
http://www.securitytracker.com/id?1027917
Data source Exploit-DB
Date added Dec. 21, 2012
Description FireFly Mediaserver 1.0.0.1359 - Null Pointer Dereference
Ransomware campaign use Unknown
Source publication date Dec. 21, 2012
Exploit type dos
Platform windows
Source update date Dec. 21, 2012
Source URL https://www.htbridge.com/advisory/HTB23129

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.