Lucene search

[email protected]CVE-2012-0708

HistoryApr 22, 2012 - 6:55 p.m.

CVE-2012-0708

2012-04-2218:55:03

CWE-119

[email protected]

web.nvd.nist.gov

122

cve-2012-0708

buffer overflow

ole api

cqole activex control

ibm rational clearquest

security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.961 High

EPSS

Percentile

99.5%

JSON

Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attackers to execute arbitrary code via a crafted web page that leverages a RegisterSchemaRepoFromFileByDbSet function-prototype mismatch.

Affected configurations

NVD

Node

ibmrational_clearquestMatch7.1.1

ibmrational_clearquestMatch7.1.1.1

ibmrational_clearquestMatch7.1.1.2

ibmrational_clearquestMatch7.1.1.3

ibmrational_clearquestMatch7.1.1.4

Node

ibmrational_clearquestMatch7.1.2

ibmrational_clearquestMatch7.1.2.1

ibmrational_clearquestMatch7.1.2.2

ibmrational_clearquestMatch7.1.2.3

ibmrational_clearquestMatch7.1.2.4

ibmrational_clearquestMatch7.1.2.5

ibmrational_clearquestMatch7.1.2.6

Node

ibmrational_clearquestMatch8.0.0

ibmrational_clearquestMatch8.0.0.1

CPENameOperatorVersion
ibm:rational_clearquestibm rational clearquesteq7.1.1
ibm:rational_clearquestibm rational clearquesteq7.1.1.1
ibm:rational_clearquestibm rational clearquesteq7.1.1.2
ibm:rational_clearquestibm rational clearquesteq7.1.1.3
ibm:rational_clearquestibm rational clearquesteq7.1.1.4

CPE	Name	Operator	Version
ibm:rational_clearquest	ibm rational clearquest	eq	7.1.1
ibm:rational_clearquest	ibm rational clearquest	eq	7.1.1.1
ibm:rational_clearquest	ibm rational clearquest	eq	7.1.1.2
ibm:rational_clearquest	ibm rational clearquest	eq	7.1.1.3
ibm:rational_clearquest	ibm rational clearquest	eq	7.1.1.4