CVE-2012-0273: Hans Alshoff Minalic

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in MinaliC 2.0.0 allow remote attackers to execute arbitrary code via a (1) session_id cookie in a request to the get_cookie_value function in response.c, (2) directory name in a request to the add_default_file function in response.c, or (3) file name in a request to the retrieve_physical_file_name_or_brows function in response.c.

Affected products

• Hans Alshoff Minalic: version 2.0.0 only

Published 2014-06-20. Last modified 2026-06-16.