CVE-2012-0708

Опубликовано: 22 апр. 2012

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attackers to execute arbitrary code via a crafted web page that leverages a RegisterSchemaRepoFromFileByDbSet function-prototype mismatch.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_clearquest:7.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.4:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:rational_clearquest:7.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.6:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:ibm:rational_clearquest:8.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:8.0.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.66566

Средний

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-mvvm-h767-v89f

github

больше 3 лет назад

EPSS

Процентиль: 98%

0.66566

Средний

9.3 Critical

CVSS2

Дефекты

CWE-119