[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fafFmsFKjRZVmTg-khw0RrFOqS8mmuyqnutuQsltxnnQ":3,"g5a-risk:CVE-2012-3406":183},{"success":4,"data":5,"meta":181},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":28,"epssPercentile":15,"epssTimeSeries":29,"severity":30,"affectedProducts":31,"affectedProductsCount":69,"references":70,"referencesCount":120,"weaknesses":121,"weaknessesCount":125,"isActivelyExploited":126,"cisaInfo":15,"otxData":15,"relatedBlogPosts":127,"seoMetadata":128,"configurations":153,"relatedVendorCves":179,"notableEvents":180},"CVE-2012-3406","What is CVE-2012-3406?","The vfprintf function in stdio-common\u002Fvfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not \"properly restrict the use of\" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.","The vfprintf function in stdio-common\u002Fvfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not \"properly restrict the use of\" ...","2014-02-10T18:15:10.12","2025-04-11T00:51:21.963",6.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":23,"ExploitabilityScore":26,"ImpactScore":27,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","MEDIUM","NONE","PARTIAL",8.6,6.4,0.03163,[28,28,28,28,28,28,28],"Medium",[32,37,40,45,50,53,56,59,62,66],{"vendor":33,"product":34,"version":35,"criteria":36,"vulnerable":4},"gnu","glibc","2.5","cpe:2.3:a:gnu:glibc:2.5:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":38,"criteria":39,"vulnerable":4},"2.12","cpe:2.3:a:gnu:glibc:2.12:*:*:*:*:*:*:*",{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"redhat","enterprise_virtualization","3.0","cpe:2.3:a:redhat:enterprise_virtualization:3.0:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"canonical","ubuntu_linux","8.04","cpe:2.3:o:canonical:ubuntu_linux:8.04:-:lts:*:*:*:*:*",{"vendor":46,"product":47,"version":51,"criteria":52,"vulnerable":4},"10.04","cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*",{"vendor":46,"product":47,"version":54,"criteria":55,"vulnerable":4},"11.04","cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":57,"criteria":58,"vulnerable":4},"11.10","cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":60,"criteria":61,"vulnerable":4},"12.04","cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*",{"vendor":41,"product":63,"version":64,"criteria":65,"vulnerable":4},"enterprise_linux","5","cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*",{"vendor":41,"product":63,"version":67,"criteria":68,"vulnerable":4},"6.0","cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",10,[71,75,78,81,84,88,92,95,98,102,104,106,108,110,112,114,116,118],{"url":72,"source":73,"tags":74},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2012-1097.html","Red Hat",[],{"url":76,"source":73,"tags":77},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2012-1098.html",[],{"url":79,"source":73,"tags":80},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2012-1185.html",[],{"url":82,"source":73,"tags":83},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2012-1200.html",[],{"url":85,"source":86,"tags":87},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2012\u002F07\u002F11\u002F17","Openwall",[],{"url":89,"source":90,"tags":91},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-1589-1","Ubuntu",[],{"url":93,"source":73,"tags":94},"https:\u002F\u002Fbugzilla.redhat.com\u002Fattachment.cgi?id=594722",[],{"url":96,"source":73,"tags":97},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=826943",[],{"url":99,"source":100,"tags":101},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201503-04","Gentoo",[],{"url":72,"source":73,"tags":103},[],{"url":76,"source":73,"tags":105},[],{"url":79,"source":73,"tags":107},[],{"url":82,"source":73,"tags":109},[],{"url":85,"source":86,"tags":111},[],{"url":89,"source":90,"tags":113},[],{"url":93,"source":73,"tags":115},[],{"url":96,"source":73,"tags":117},[],{"url":99,"source":100,"tags":119},[],18,[122],{"id":123,"name":123,"description":124},"Unknown","CWE-264",1,false,[],{"title":129,"metaDescription":130,"keywords":131,"canonicalUrl":132,"structuredData":133},"What is CVE-2012-3406? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2012-3406, a medium severity cyber security vulnerability from 2014. The vfprintf function in stdio-common\u002Fvfprintf.c in GNU C ...","CVE-2012-3406, CVE-2012-3406 vulnerability, CVE-2012-3406 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, gnu security, redhat security, canonical security, glibc vulnerability, enterprise_virtualization vulnerability, ubuntu_linux vulnerability, enterprise_linux vulnerability","\u002Fwhat-is\u002Fcve-2012-3406",{"@context":134,"@type":135,"headline":129,"description":130,"datePublished":10,"dateModified":11,"author":136,"publisher":140,"about":144,"mainEntityOfPage":148,"articleSection":151,"keywords":152},"https:\u002F\u002Fschema.org","TechArticle",{"@type":137,"name":138,"url":139},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":137,"name":138,"url":139,"logo":141},{"@type":142,"url":143},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":145,"name":6,"description":146,"additionalType":147},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":149,"@id":150},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2012-3406","Cybersecurity","CVE-2012-3406, CVE-2012-3406 vulnerability, CVE-2012-3406 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[154],{"Operator":15,"Negate":15,"Nodes":155},[156],{"Operator":157,"Negate":15,"CPEMatch":158},"OR",[159,161,163,165,167,169,171,173,175,177],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":160,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DC0B9503-9AD0-4A1A-BD4F-4B902BFC8E5F",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":162,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"18F57529-10DF-447A-8C53-DD4B1C2AA21E",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":164,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"105130E9-D48E-4FB8-A715-E6438EC7E744",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":166,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D6DFE2D3-46E2-4D0C-8508-30307D654560",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":168,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7118F616-25CA-4E34-AA13-4D14BB62419F",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":170,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"EF49D26F-142E-468B-87C1-BABEA445255C",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":172,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E4174F4F-149E-41A6-BBCC-D01114C05F38",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":174,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F5D324C4-97C7-49D3-A809-9EAD4B690C69",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":176,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"AA9B3CC0-DF1C-4A86-B2A3-A9D428A5A6E6",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":178,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC",[],[],{"lastModified":11,"cacheTime":182,"version":21},1792281692935,{"score":184,"band":185,"action":186,"scoredAt":187},26,"Low","Monitor","2026-10-17T07:07:27.252698+00:00"]