CVE-2012-4524

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

xlockmore before 5.43 'dclock' security bypass vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
xlockmore	xlockmore	< 5.43

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091108.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091150.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091709.htmlThird Party Advisory
http://security.gentoo.org/glsa/glsa-201309-03.xmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2012/10/17/12Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/56169Third Party Advisory, VDB Entry
https://access.redhat.com/security/cve/cve-2012-4524Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4524Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/79558Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2012-4524Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091108.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091150.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091709.htmlThird Party Advisory
http://security.gentoo.org/glsa/glsa-201309-03.xmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2012/10/17/12Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/56169Third Party Advisory, VDB Entry
https://access.redhat.com/security/cve/cve-2012-4524Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4524Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/79558Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2012-4524Third Party Advisory

Timeline

Published: Nov 21, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-45256.1piwigo has XSS in password.php CVE-2012-45266.1piwigo has XSS in password.php (incomplete fix for CVE-2012-4525)CVE-2012-45276.8Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service (crash) and possi CVE-2012-45285.0The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to CVE-2012-45294.3The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE,CVE-2012-45302.1The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users CVE-2012-45314.3Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via un CVE-2012-45324.3Cross-site scripting (XSS) vulnerability in modules/mod_languages/tmpl/default.php in the Language Switcher module for Joomla! 2.5.x before CVE-2012-45334.3Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in ViewVC 1.0.x before CVE-2012-45342.6org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conj CVE-2012-45351.9Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and CVE-2012-45362.1The (1) domain_pirq_to_emuirq and (2) physdev_unmap_pirq functions in Xen 2.2 allows local guest OS administrators to cause a denial of serv