CVEvulnerability

CVE-2012-0985

9.3 HIGH Published 2012-06-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-06-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.00_64, 1.0.1, 2.0, and 3.0; SmartWi Connection Utility 4.7, 4.7.4, 4.8, 4.9, 4.10, and 4.11; and VAIO Easy Connect software 1.0.0 and 1.1.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the second argument of the (1) SetTmpProfileOption or (2) ConnectToNetwork method.

Affected configurations

• sony smartwi connection utillity 4.7 • sony smartwi connection utillity 4.7.4 • sony smartwi connection utillity 4.8 • sony smartwi connection utillity 4.9 • sony smartwi connection utillity 4.10 • sony smartwi connection utillity 4.11 • sony vaio easy connect 1.0.0 • sony vaio easy connect 1.1.0 • sony vaio pc wireless lan wizard 1.0 • sony vaio wireless wizard 1.00 • sony vaio wireless wizard 1.00 64 • sony vaio wireless wizard 1.01 • sony vaio wireless wizard 2.0 • sony vaio wireless wizard 3.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References