Lucene search

K
cveMitreCVE-2012-6429
HistoryApr 04, 2014 - 2:55 p.m.

CVE-2012-6429

2014-04-0414:55:07
CWE-119
mitre
web.nvd.nist.gov
31
buffer overflow
syncservice.dll
activex control
samsung kies
remote code execution
cve-2012-6429
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.455

Percentile

97.4%

Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123_2_7 allows remote attackers to execute arbitrary code via a long string to the password argument.

Affected configurations

Nvd
Node
samsungkiesRange2.5.0.12114_1
VendorProductVersionCPE
samsungkies*cpe:2.3:a:samsung:kies:*:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.455

Percentile

97.4%