NVD

Id
42401  
Name
CVE-2012-0266  
Description
Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModule method, (2) a long bstrParams parameter to the Check method, a long bstrUrl parameter to the (3) Download or (4) DownloadModule method during construction of a .ntr pathname, or a long bstrUrl parameter to the (5) Download or (6) DownloadModule method during construction of a URL.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-01-14  
Modified Date
2013-04-04  
Seq
2012-0266  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
213842 42401 CVE-2012-0266 20120111 Secunia Research: NTR ActiveX Control Four Buffer Overflow Vulnerabilities  View
213843 42401 CVE-2012-0266 21841  View
213844 42401 CVE-2012-0266 ntr-startmodule-bo(72291)  View
213845 42401 CVE-2012-0266 ntr-check-bo(72292)  View
213846 42401 CVE-2012-0266 ntr-download-bo(72293)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25352 JVNDB-2012-001059 NTR ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 NTR ActiveX コントロールには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2012-0266 53504 CVE-2012-0266 42401 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001059.html 2012-01-15 2012-01-17 View