CVE-2012-10058

N/A Unknown
Published: August 13, 2025 Modified: April 15, 2026
View on NVD

Description

RabidHamster R4 v1.25 contains a stack-based buffer overflow vulnerability due to unsafe use of sprintf() when logging malformed HTTP requests. A remote attacker can exploit this flaw by sending a specially crafted URI, resulting in arbitrary code execution under the context of the web server process.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://aluigi.altervista.org/adv/r4_1-adv.txt
Source: disclosure@vulncheck.com
https://advisories.checkpoint.com/defense/advisories/public/2013/cpai-07-jan405.html
Source: disclosure@vulncheck.com
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/rabidhamster_r4_log.rb
Source: disclosure@vulncheck.com
https://www.exploit-db.com/exploits/18929
Source: disclosure@vulncheck.com
https://www.rabidhamster.org/R4/download.php
Source: disclosure@vulncheck.com
https://www.vulncheck.com/advisories/rabidhamster-r4-log-entry-buffer-overflow
Source: disclosure@vulncheck.com
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/rabidhamster_r4_log.rb
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

7 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
58.6%
98th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-121

Related CVEs

CVE-2026-7696 6.3
CVE-2026-7695 7.3
CVE-2026-7694 7.3
CVE-2026-7692 6.3
CVE-2026-7691 6.3