Lucene search

K
cveMitreCVE-2012-4250
HistoryAug 13, 2012 - 6:55 p.m.

CVE-2012-4250

2012-08-1318:55:04
CWE-119
mitre
web.nvd.nist.gov
28
cve
buffer-overflow
xprocesscontrol.ocx
activex
msls31.dll
samsung net-i viewer

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.3

Confidence

High

EPSS

0.303

Percentile

97.0%

Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls31.dll in Samsung NET-i viewer 1.37 allows remote attackers to execute arbitrary code via a long string in the first argument.

Affected configurations

Nvd
Node
samsungnet-i_viewerMatch1.37
VendorProductVersionCPE
samsungnet-i_viewer1.37cpe:2.3:a:samsung:net-i_viewer:1.37:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.3

Confidence

High

EPSS

0.303

Percentile

97.0%

Related for CVE-2012-4250