CVE-2012-0198

high · 9.3

Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file.

9.3

CVSS

37.4%

EPSS (exploit prob.)

98th

EPSS percentile

2012-03-06

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
ibm	tivoli_provisioning_manager_express_for_software_distribution	4.1.1

Check a specific version with /api/v1/cve/match.

References

http://www.zerodayinitiative.com/advisories/ZDI-12-040/
https://exchange.xforce.ibmcloud.com/vulnerabilities/73033
http://www.zerodayinitiative.com/advisories/ZDI-12-040/
https://exchange.xforce.ibmcloud.com/vulnerabilities/73033

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-0198