CVE

Id
53509  
CVE No.
CVE-2012-0266  
Status
Candidate  
Description
Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModule method, (2) a long bstrParams parameter to the Check method, a long bstrUrl parameter to the (3) Download or (4) DownloadModule method during construction of a .ntr pathname, or a long bstrUrl parameter to the (5) Download or (6) DownloadModule method during construction of a URL.  
Phase
Assigned (20111230)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
564817 53509 CVE-2012-0266 BUGTRAQ:20120111 Secunia Research: NTR ActiveX Control Four Buffer Overflow Vulnerabilities  View
564818 53509 CVE-2012-0266 URL:http://archives.neohapsis.com/archives/bugtraq/2012-01/0074.html  View
564819 53509 CVE-2012-0266 EXPLOIT-DB:21841  View
564820 53509 CVE-2012-0266 URL:http://www.exploit-db.com/exploits/21841  View
564821 53509 CVE-2012-0266 MISC:http://secunia.com/secunia_research/2012-1/  View
564822 53509 CVE-2012-0266 OSVDB:78252  View
564823 53509 CVE-2012-0266 URL:http://osvdb.org/78252  View
564824 53509 CVE-2012-0266 SECUNIA:45166  View
564825 53509 CVE-2012-0266 URL:http://secunia.com/advisories/45166  View
564826 53509 CVE-2012-0266 XF:ntr-startmodule-bo(72291)  View
564827 53509 CVE-2012-0266 URL:http://xforce.iss.net/xforce/xfdb/72291  View
564828 53509 CVE-2012-0266 XF:ntr-check-bo(72292)  View
564829 53509 CVE-2012-0266 URL:http://xforce.iss.net/xforce/xfdb/72292  View
564830 53509 CVE-2012-0266 XF:ntr-download-bo(72293)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28761 JVNDB-2012-004468 Novell GroupWise の GWIA の gwia.exe における整数オーバーフローの脆弱性 Novell GroupWise の GroupWise Internet Agent (GWIA) の gwia.exe 内の WebConsole コンポーネントには、整数オーバーフローの脆弱性が存在します。 CVE-2012-0271 53509 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004468.html  View