Lucene search

K
cve[email protected]CVE-2012-4250
HistoryAug 13, 2012 - 6:55 p.m.

CVE-2012-4250

2012-08-1318:55:04
CWE-119
web.nvd.nist.gov
22
cve
buffer-overflow
xprocesscontrol.ocx
activex
msls31.dll
samsung net-i viewer

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.408 Medium

EPSS

Percentile

97.3%

Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls31.dll in Samsung NET-i viewer 1.37 allows remote attackers to execute arbitrary code via a long string in the first argument.

Affected configurations

NVD
Node
samsungnet-i_viewerMatch1.37

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.408 Medium

EPSS

Percentile

97.3%

Related for CVE-2012-4250