CVE-2012-0708 Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attack...
HighCVSS 9.3
EPSS 31.4%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attackers to execute arbitrary code via a crafted web page that leverages a RegisterSchemaRepoFromFileByDbSet function-prototype mismatch.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm rational clearquest | = 7.1.1 | No fix listed |
| ibm rational clearquest | = 7.1.1.1 | No fix listed |
| ibm rational clearquest | = 7.1.1.2 | No fix listed |
| ibm rational clearquest | = 7.1.1.3 | No fix listed |
| ibm rational clearquest | = 7.1.1.4 | No fix listed |
| ibm rational clearquest | = 7.1.2 | No fix listed |
| ibm rational clearquest | = 7.1.2.1 | No fix listed |
| ibm rational clearquest | = 7.1.2.2 | No fix listed |
| ibm rational clearquest | = 7.1.2.3 | No fix listed |
| ibm rational clearquest | = 7.1.2.4 | No fix listed |
| ibm rational clearquest | = 7.1.2.5 | No fix listed |
| ibm rational clearquest | = 7.1.2.6 | No fix listed |
| ibm rational clearquest | = 8.0.0 | No fix listed |
| ibm rational clearquest | = 8.0.0.1 | No fix listed |
References
- 81443 vdb-entry
- 48933 third-party-advisory
- www.ibm.com vendor-advisory
- 53170 vdb-entry
- 1026958 vdb-entry
- rcq-cqole-activex-bo(73492) vdb-entry