Remote Code Execution Vulnerability in Quest InTrust's Annotation Objects Extension
CVE-2012-5896
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 68%
What is CVE-2012-5896?
The Annotation Objects Extension ActiveX control in Quest InTrust is susceptible to a vulnerability due to improper implementation of the Add method in AnnotateX.dll. This flaw enables remote attackers to exploit an uninitialized pointer, allowing for arbitrary code execution through specially crafted arguments. Affected versions include Quest InTrust 10.4.0.853 and earlier, which could lead to significant security breaches if not addressed.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.