CVE-2017-12969 Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of service (heap corruption and crash) or exec...
HighCVSS 8.8
EPSS 10.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of service (heap corruption and crash) or execute arbitrary code via a long string to the open method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avaya ip office contact center | = 9.1-sp11 | No fix listed |
| avaya ip office contact center | = 9.1.0 | No fix listed |
| avaya ip office contact center | = 9.1.0.2209.1540 | No fix listed |
| avaya ip office contact center | = 9.1.6 | No fix listed |
| avaya ip office contact center | = 9.1.7 | No fix listed |
| avaya ip office contact center | = 9.1.8 | No fix listed |
| avaya ip office contact center | = 9.1.9 | No fix listed |
| avaya ip office contact center | = 10.0 | No fix listed |
| avaya ip office contact center | = 10.0.0.3-8600.1705 | No fix listed |
| avaya ip office contact center | = 10.1 | No fix listed |
References
- downloads.avaya.com vendor-advisory
- hyp3rlinx.altervista.org
- packetstormsecurity.com third-party-advisory vdb-entry
- 20171105 CVE-2017-12969 Avaya OfficeScan IPO Remote ActiveX Buffer Overflow mailing-list third-party-advisory
- 101667 third-party-advisory vdb-entry
- 43120 exploit third-party-advisory vdb-entry