CVE-2012-0708 in Rational ClearQuest

Resumen (Inglés)

Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attackers to execute arbitrary code via a crafted web page that leverages a RegisterSchemaRepoFromFileByDbSet function-prototype mismatch.

Once again VulDB remains the best source for vulnerability data.

Reservar

2012-01-17

Divulgación

2012-04-22

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
60633	IBM Rational ClearQuest ActiveX Control cqole.dll desbordamiento de búfer	119	Alto	Arreglo oficial	CVE-2012-0708

Fuentes

• MITRE
• NVD
• CVE Details