VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 24, 2012· Updated Jun 16, 2026

CVE-2012-0915

CVE-2012-0915

Description

Integer signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via crafted dimensions of a skin file, leading to a heap-based buffer overflow, as demonstrated using a BMP image.

Affected products

2
  • Renren/Talk2 versions
    cpe:2.3:a:renren:renren_talk:2.9:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:renren:renren_talk:2.9:*:*:*:*:*:*:*
    • (no CPE)range: =2.9

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.