CVE-2012-4329

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart) via a crafted controller name.

Metrics

CVSS 2.0 7.8/10AV:N/AC:L/Au:N/C:N/I:N/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://aluigi.org/adv/samsux_1-adv.txtExploit
http://archives.neohapsis.com/archives/bugtraq/2012-04/0142.htmlBroken Link, Exploit
http://www.exploit-db.com/exploits/18751Exploit, Third Party Advisory, VDB Entry
http://www.osvdb.org/81221Broken Link
http://www.securityfocus.com/bid/53161Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1026976Exploit, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74927Third Party Advisory, VDB Entry
http://aluigi.org/adv/samsux_1-adv.txtExploit
http://archives.neohapsis.com/archives/bugtraq/2012-04/0142.htmlBroken Link, Exploit
http://www.exploit-db.com/exploits/18751Exploit, Third Party Advisory, VDB Entry
http://www.osvdb.org/81221Broken Link
http://www.securityfocus.com/bid/53161Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1026976Exploit, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74927Third Party Advisory, VDB Entry

Timeline

Published: Aug 14, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-43307.8The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long string in certain f CVE-2012-433110.0Multiple unspecified vulnerabilities in SPIP before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 have unknown impact and attack vec CVE-2012-43325.0The ShareYourCart plugin 1.7.1 for WordPress allows remote attackers to obtain the installation path via unspecified vectors related to the CVE-2012-433310.0Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in CVE-2012-433410.0The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 al CVE-2012-43357.8Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service (infinite loop) via a negative size value in a TCP req CVE-2012-43364.3Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web s CVE-2012-43379.3Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted atta CVE-2012-43404.3Cross-site scripting (XSS) vulnerability in Sybase EAServer before 6.1 allows remote attackers to inject arbitrary web script or HTML via un CVE-2012-434110.0Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service (crash CVE-2012-43424.3Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML CVE-2012-43437.5Multiple unspecified vulnerabilities in Gallery 3 before 3.0.4 allow attackers to execute arbitrary PHP code via unknown vectors.