CVE-2012-0198

2012-03-0604:18:03

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.966

Percentile

99.7%

JSON

Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file.

Affected configurations

Nvd

Node

ibmtivoli_provisioning_manager_express_for_software_distributionMatch4.1.1

VendorProductVersionCPE
ibmtivoli_provisioning_manager_express_for_software_distribution4.1.1cpe:2.3:a:ibm:tivoli_provisioning_manager_express_for_software_distribution:4.1.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	tivoli_provisioning_manager_express_for_software_distribution	4.1.1	cpe:2.3:a:ibm:tivoli_provisioning_manager_express_for_software_distribution:4.1.1:::::::*