CVE-2012-3410

CVE-2012-3410 describes a stack-based buffer overflow vulnerability in GNU Bash versions prior to 4.2 patch 33. This flaw allows local users to potentially bypass restricted shell access by providing an excessively long filename within the /dev/fd directory, which Bash fails to handle correctly during prefix expansion. The vulnerability has a CVSS score of 4.6, indicating low attack complexity and requiring local access, with potential impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.