NVD

Id
44274  
Name
CVE-2012-2515  
Description
Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; GE Intelligent Platforms Proficy HMI/SCADA iFIX 5.0 and 5.1; GE Intelligent Platforms Proficy Pulse 1.0; GE Intelligent Platforms Proficy Batch Execution 5.6; GE Intelligent Platforms SI7 I/O Driver 7.20 through 7.42; and other products, allow remote attackers to execute arbitrary code via a long string in the second argument to the (1) JumpMappedID or (2) JumpURL method.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-07-04  
Modified Date
2012-07-17  
Seq
2012-2515  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222245 44274 CVE-2012-2515 http://retrogod.altervista.org/9sg_emc_keyhelp.html  View
222246 44274 CVE-2012-2515 http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/14000/KB14863/en_US/GEIP12-04%20Security%20Advisory%20-%20Proficy%20HTML%20Help.pdf  View
222247 44274 CVE-2012-2515 36546  View
222248 44274 CVE-2012-2515 http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-02.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27306 JVNDB-2012-003013 EMC および GE 製品などで使用される KeyWorks KeyHelp におけるスタックベースのバッファオーバーフローの脆弱性 EMC Documentum ApplicationXtender Desktop および EMC Captiva QuickScan Pro、また複数の GE Intelligent Platforms 製品、およびその他の製品で使用される KeyWorks KeyHelp モジュールの KeyHelp.ocx 1.2.312 内の KeyHelp.KeyCtrl.1 ActiveX コントロールには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2012-2515 55753 CVE-2012-2515 44274 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003013.html 2012-04-24 2012-07-06 View