KLA10206 ACE vulnerability in IBM Personal Communications

A buffer overflow was found in IBM Personal Communications. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed .ws file.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Related products

IBM-Personal-Communications

CVE list

CVE-2012-0201 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• IBM Personal Communications 5.9 versions 5.9.7 and earlierIBM Personal Communications 6 versions 6.0.3 and earlier