CVE-2012-0266 Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModule method, (2) a long....
HighCVSS 9.3
EPSS 42.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModule method, (2) a long bstrParams parameter to the Check method, a long bstrUrl parameter to the (3) Download or (4) DownloadModule method during construction of a .ntr pathname, or a long bstrUrl parameter to the (5) Download or (6) DownloadModule method during construction of a URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ntrglobal ntr activex control | <= 1.1.8 | No fix listed |
References
- 20120111 Secunia Research: NTR ActiveX Control Four Buffer Overflow Vulnerabilities mailing-list
- 78252 vdb-entry
- 45166 third-party-advisory
- secunia.com vendor-advisory
- 21841 exploit
- ntr-startmodule-bo(72291) vdb-entry
- ntr-check-bo(72292) vdb-entry
- ntr-download-bo(72293) vdb-entry