CVE-2012-0985

high · 9.3

Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.00_64, 1.0.1, 2.0, and 3.0; SmartWi Connection Utility 4.7, 4.7.4, 4.8, 4.9, 4.10, and 4.11; and VAIO Easy Connect software 1.0.0 and 1.1.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the second argument of the (1) SetTmpProfileOption or (2) ConnectToNetwork method.

9.3

CVSS

13.0%

EPSS (exploit prob.)

96th

EPSS percentile

2012-06-07

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
sony	smartwi_connection_utillity	4.7
sony	smartwi_connection_utillity	4.7.4
sony	smartwi_connection_utillity	4.8
sony	smartwi_connection_utillity	4.9
sony	smartwi_connection_utillity	4.10
sony	smartwi_connection_utillity	4.11
sony	vaio_easy_connect	1.0.0
sony	vaio_easy_connect	1.1.0
sony	vaio_pc_wireless_lan_wizard	1.0
sony	vaio_wireless_wizard	1.00
sony	vaio_wireless_wizard	1.00_64
sony	vaio_wireless_wizard	1.01
sony	vaio_wireless_wizard	2.0
sony	vaio_wireless_wizard	3.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-0985