CVE-2012-2967
published 2012-08-12CVE-2012-2967: Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has…
PriorityP428high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.62%
73.0th percentile
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
Affected
88 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| caucho | resin | <= 4.0.28 | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
| caucho | resin | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
osv·2022-05-17
CVE-2012-2967 [HIGH] Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the `==` (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
GHSA
Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
ghsa·2022-05-17
CVE-2012-2967 [HIGH] Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the `==` (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://caucho.com/resin-4.0/changes/changes.xtphttp://en.securitylab.ru/lab/http://en.securitylab.ru/lab/PT-2012-05http://www.kb.cert.org/vuls/id/309979http://caucho.com/resin-4.0/changes/changes.xtphttp://en.securitylab.ru/lab/http://en.securitylab.ru/lab/PT-2012-05http://www.kb.cert.org/vuls/id/309979
2012-08-12
Published