critical9.3Public exploit code
CVE-2012-2176
Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM Lotus QuickR qp2 - ActiveX Buffer Overflow (Metasploit)2012-12-31 · remote · windows · Verified
Impact
Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long argument to the (1) Attachment_Times or (2) Import_Times method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Lotus Quickr | Version 8.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=swg21596191
- http://www.securityfocus.com/bid/53678
- http://www.securitytracker.com/id?1027097
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75322
- http://www.ibm.com/support/docview.wss?uid=swg21596191
- http://www.securityfocus.com/bid/53678
- http://www.securitytracker.com/id?1027097
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75322