Lucene search

MitreCVE-2012-4333

HistoryAug 14, 2012 - 10:55 p.m.

CVE-2012-4333

2012-08-1422:55:02

CWE-119

mitre

web.nvd.nist.gov

cve-2012-4333

samsung net-i viewer

buffer overflow

stack-based

ums_ctrl

activex

code execution

remote attack

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.617

Percentile

97.9%

JSON

Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

samsungnet-i_viewerMatch1.37.120316

VendorProductVersionCPE
samsungnet-i_viewer1.37.120316cpe:2.3:a:samsung:net-i_viewer:1.37.120316:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
samsung	net-i_viewer	1.37.120316	cpe:2.3:a:samsung:net-i_viewer:1.37.120316:::::::*

References

secunia.com/advisories/48966

www.exploit-db.com/exploits/18765

www.securityfocus.com/bid/53193

exchange.xforce.ibmcloud.com/vulnerabilities/75070

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.617

Percentile

97.9%

JSON

Related for CVE-2012-4333