Samba 'AndX' Request Heap Based Buffer Overflow Vulnerability (CVE-2012-0870)

Publish date: July 21, 2015
  Severity: HIGH
  CVE Identifier: CVE-2012-0870
  Advisory Date: JUL 21, 2015

  DESCRIPTION

Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1004962
  Trend Micro Deep Security DPI Rule Name: 1004962 - Samba 'AndX' Request Heap Based Buffer Overflow Vulnerability (CVE-2012-0870)

  AFFECTED SOFTWARE AND VERSION

  • rim blackberry_playbook_os 1.0
  • rim blackberry_playbook_os 1.0.3
  • rim blackberry_playbook_os 1.0.5
  • rim blackberry_playbook_os 1.0.6
  • rim blackberry_playbook_os 1.0.7
  • rim blackberry_playbook_os 1.0.7.2942
  • rim blackberry_playbook_os 1.0.7.3312
  • rim blackberry_playbook_os 1.0.8.4985
  • rim blackberry_playbook_os 1.0.8.6067
  • rim blackberry_playbook_os 2.0
  • rim blackberry_playbook_tablet -
  • samba samba 3.0

Featured Stories