CVEvulnerability
CVE-2012-0198
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-03-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file.
Affected configurations
• ibm tivoli provisioning manager express for software distribution 4.1.1
References
- http://www.zerodayinitiative.com/advisories/ZDI-12-040/ www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73033 exchange.xforce.ibmcloud.com
- http://www.zerodayinitiative.com/advisories/ZDI-12-040/ www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73033 exchange.xforce.ibmcloud.com