CVE-2012-0201 Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long profi...
HighCVSS 9.3
EPSS 36.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long profile string in a WorkStation (aka .ws) file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm personal communications | = 5.9.7.0 | No fix listed |
| ibm personal communications | = 5.9.7.1 | No fix listed |
| ibm personal communications | = 6.0.3.0 | No fix listed |
References
- dev.metasploit.com
- IC81539 vendor-advisory
- www-01.ibm.com vendor-advisory
- 18539 exploit
- www.metasploit.com
- www.stratsec.net exploit
- pcom-pcspref-bo(73127) vdb-entry