CVE-2012-2990

Currently unrated

Key Information:

Vendor
Samsung
Status
Kies
Vendor
CVE Published:
24 August 2012

Summary

The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny ContentSAFER, as distributed in Samsung KIES before 2.3.2.12074_13_13, does not properly implement unspecified methods, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted HTML document.

References

http://www.kb.cert.org/vuls/id/663809
third-party-advisoryx_refsource_CERT-VN
http://www.krcert.or.kr/kor/data/secNoticeView.jsp?p_bull...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.