Description
Integer signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via crafted dimensions of a skin file, leading to a heap-based buffer overflow, as demonstrated using a BMP image.
Unscored
CVE-2012-0915
EUVD-2012-0938GHSA-x6qm-gh33-v932
Integer signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via crafted dimensions of a skin file, leadin…
Published Jan 24, 2012 · Updated Sep 16, 2024 · Assigned by mitre