Lucene search

K
cveIbmCVE-2012-2176
HistoryMay 25, 2012 - 8:55 p.m.

CVE-2012-2176

2012-05-2520:55:01
CWE-119
ibm
web.nvd.nist.gov
108
cve-2012-2176
ibm lotus quickr 8.2
buffer overflow
activex control
remote code execution
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.765

Percentile

98.2%

Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long argument to the (1) Attachment_Times or (2) Import_Times method.

Affected configurations

Nvd
Node
ibmlotus_quickrMatch8.2
VendorProductVersionCPE
ibmlotus_quickr8.2cpe:2.3:a:ibm:lotus_quickr:8.2:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.765

Percentile

98.2%