CVE-2012-0201

Currently unrated

Key Information:

Vendor
IBM
Status
Personal Communications
Vendor
CVE Published:
2 March 2012

Summary

Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long profile string in a WorkStation (aka .ws) file.

References

http://www.exploit-db.com/exploits/18539/
exploitx_refsource_EXPLOIT-DB
http://www-01.ibm.com/support/docview.wss?uid=swg21586166
x_refsource_CONFIRM
http://www.stratsec.net/Research/Advisories/IBM-Personal-...
x_refsource_MISC

EPSS Score

79% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.