CVE-2012-4924 in Ipswcom Activex Component

Riassunto

di MITRE

Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 15/09/2012
• Divulgazione: 15/09/2012
• Moderazione: accettato
• Voce: VDB-62271
• CPE: pronto
• CWE: CWE-119 (confermato)
• Sfruttamento: Scaricare
• CVSS: 9.3 (NVD)
• EPSS: 0.84277
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4924
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4924
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4924/