Sign-up

ID

VAR-201208-0214


CVE

CVE-2012-4330


TITLE

Samsung D6000 TV Service disruption in other products ( crash ) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2012-003670

DESCRIPTION

The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long string in certain fields, as demonstrated by the MAC address field, possibly a buffer overflow. Samsung TV and BD products that support the 'Samsung Remote' mobile application are prone to multiple denial-of-service vulnerabilities. Remote attackers can exploit these issues to cause the device to crash, denying service to legitimate users

Trust: 1.89

sources: NVD: CVE-2012-4330 // JVNDB: JVNDB-2012-003670 // BID: 53161

AFFECTED PRODUCTS

vendor:samsungmodel:d6000scope:eqversion: -

Trust: 1.0

vendor:samsungmodel:d6000 tvscope: - version: -

Trust: 0.8

vendor:samsongmodel:d6000scope: - version: -

Trust: 0.6

vendor:samsungmodel:tvscope:eqversion:0

Trust: 0.3

vendor:samsungmodel:bdscope:eqversion:0

Trust: 0.3

sources: BID: 53161 // JVNDB: JVNDB-2012-003670 // CNNVD: CNNVD-201208-202 // NVD: CVE-2012-4330

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2012-4330
value: HIGH

Trust: 1.0

NVD: CVE-2012-4330
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201208-202
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2012-4330
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

sources: JVNDB: JVNDB-2012-003670 // CNNVD: CNNVD-201208-202 // NVD: CVE-2012-4330

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.8

sources: JVNDB: JVNDB-2012-003670 // NVD: CVE-2012-4330

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201208-202

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201208-202

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2012-003670

PATCH
title:Samsung TV Top Pageurl:http://www.samsung.com/au/tv/led-tv-range.html
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2012-003670

EXTERNAL IDS
db:NVDid:CVE-2012-4330
Trust: 2.7
db:BIDid:53161
Trust: 1.9
db:EXPLOIT-DBid:18751
Trust: 1.6
db:SECTRACKid:1026976
Trust: 1.6
db:OSVDBid:81222
Trust: 1.6
db:JVNDBid:JVNDB-2012-003670
Trust: 0.8
db:CNNVDid:CNNVD-201208-202
Trust: 0.6
sources:
            
            
            BID: 53161 // 
            
            
            
            JVNDB: JVNDB-2012-003670 // 
            
            
            
            CNNVD: CNNVD-201208-202 // 
            
            
            
            NVD: CVE-2012-4330

REFERENCES
url:http://archives.neohapsis.com/archives/bugtraq/2012-04/0142.html
Trust: 2.4
url:http://aluigi.org/adv/samsux_1-adv.txt
Trust: 1.9
url:http://www.exploit-db.com/exploits/18751
Trust: 1.6
url:http://www.osvdb.org/81222
Trust: 1.6
url:http://www.securitytracker.com/id?1026976
Trust: 1.6
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/74928
Trust: 1.6
url:http://www.securityfocus.com/bid/53161
Trust: 1.6
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-4330
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-4330
Trust: 0.8
url:http://www.samsung.com/
Trust: 0.3
sources:
            
            
            BID: 53161 // 
            
            
            
            JVNDB: JVNDB-2012-003670 // 
            
            
            
            CNNVD: CNNVD-201208-202 // 
            
            
            
            NVD: CVE-2012-4330

CREDITS
Luigi Auriemma
Trust: 0.3
sources:
            
            
            BID: 53161

SOURCES
db:BIDid:53161
db:JVNDBid:JVNDB-2012-003670
db:CNNVDid:CNNVD-201208-202
db:NVDid:CVE-2012-4330

LAST UPDATE DATE
2025-04-11T22:59:16.396000+00:00

SOURCES UPDATE DATE
db:BIDid:53161date:2012-08-16T13:30:00
db:JVNDBid:JVNDB-2012-003670date:2012-08-17T00:00:00
db:CNNVDid:CNNVD-201208-202date:2022-02-25T00:00:00
db:NVDid:CVE-2012-4330date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:BIDid:53161date:2012-04-19T00:00:00
db:JVNDBid:JVNDB-2012-003670date:2012-08-17T00:00:00
db:CNNVDid:CNNVD-201208-202date:2012-08-16T00:00:00
db:NVDid:CVE-2012-4330date:2012-08-14T22:55:02.330