critical9.3Public exploit code
CVE-2012-4924
Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitra…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ASUS Net4Switch - 'ipswcom.dll' ActiveX Stack Buffer Overflow (Metasploit)2012-02-29 · remote · windows · Verified
Impact
Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asus | Ipswcom Activex Component | Version 1.0.0.1 |
| Asus | Net4switch | Version 1.0.0020 |
Weakness classification
References
- NVD record
- CVE.org record
- http://dsecrg.com/pages/vul/show.php?id=417
- http://osvdb.org/79438
- http://secunia.com/advisories/48125
- http://www.exploit-db.com/exploits/18538
- http://www.securityfocus.com/bid/52110
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73384
- http://dsecrg.com/pages/vul/show.php?id=417
- http://osvdb.org/79438
- http://secunia.com/advisories/48125
- http://www.exploit-db.com/exploits/18538
- http://www.securityfocus.com/bid/52110
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73384