CVE-2012-4924 Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert...
HighCVSS 9.3
EPSS 36.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ASUS ipswcom activex component | = 1.0.0.1 | No fix listed |
| ASUS net4switch | = 1.0.0020 | No fix listed |
References
- dsecrg.com
- 79438 vdb-entry
- 48125 third-party-advisory vendor-advisory
- 18538 exploit
- 52110 vdb-entry
- net4switch-activex-bo(73384) vdb-entry