CVEvulnerability

CVE-2012-5896

10.0 HIGH Published 2012-11-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-11-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized pointer."

Affected configurations

• quest intrust (<= 10.4.0.853) • quest intrust 10.1 • quest intrust 10.2.5 • quest intrust 10.3 • quest intrust 10.4

References