CVE-2012-2176

Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long argument to the (1) Attachment_Times or (2) Import_Times method.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

31.17% chance of exploitation in the next 30 days, 98th percentile

Published

2012-05-25

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/quickr_qp2_bof.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/23737

References

• CVE Record
• NVD entry

Related

• CVE-2012-2175
• CVE-2012-2179
• CVE-2012-2174
• CVE-2012-2202
• CVE-2012-2172
• CVE-2012-2206