CVE-2012-10058

published 2025-08-13

CVE-2012-10058: RabidHamster R4 v1.25 contains a stack-based buffer overflow vulnerability due to unsafe use of sprintf() when logging malformed HTTP requests. A remote…

Priority P2 69 critical 10 CVSS 4.0

AV N AC L AT N PR N UI N VC H VI H VA H SC H SI H SA H E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

EXPLOIT

RabidHamster R4 v1.25 contains a stack-based buffer overflow vulnerability due to unsafe use of sprintf() when logging malformed HTTP requests. A remote attacker can exploit this flaw by sending a specially crafted URI, resulting in arbitrary code execution under the context of the web server process.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
rabidhamster	r4_embedded_server	—	—

Detection & IOCs extracted from sources · hover to see the quote

version RabidHamster R4 v1.25↗

• → Detect malformed/oversized HTTP request URIs sent to RabidHamster R4 web server; the overflow is triggered during log generation via sprintf() when processing a specially crafted URI. ↗
• → Monitor for exploitation of the RabidHamster R4 web server process spawning unexpected child processes or executing shellcode, as successful exploitation runs arbitrary code under the web server process context. ↗

• · The vulnerability is only present in RabidHamster R4 version 1.25; verify target version before applying detections. ↗
• · The Metasploit module targets Windows HTTP and exploits the log entry sprintf() code path specifically; detections should be scoped to Windows hosts running the R4 web server. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-121