CVE-2011-10012 NetOp Remote Control Client 9.5 .dws File Buffer Overflow
HighCVSS 8.4
EPSS 0.55%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
NetOp (now part of Impero Software) Remote Control Client v9.5 is vulnerable to a stack-based buffer overflow when processing .dws configuration files. If a .dws file contains a string longer than 520 bytes, the application fails to perform proper bounds checking, allowing an attacker to execute arbitrary code when the file is opened.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netop Remote Control Client | = 9.5 | No fix listed |
References
- raw.githubusercontent.com exploit
- www.exploit-db.com exploit
- www.exploit-db.com exploit
- www.fortiguard.com third-party-advisory
- netop.com product
- web.archive.org patch
- www.vulncheck.com third-party-advisory