CVE-2012-0198

Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

37.44% chance of exploitation in the next 30 days, 98th percentile

Published

2012-03-06

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ibm_tivoli_pme_a…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18727

References

• CVE Record
• NVD entry

Related

• CVE-2012-0181
• CVE-2012-0200
• CVE-2012-0163
• CVE-2012-0201
• CVE-2012-0158
• CVE-2012-0202