medium6.8Public exploit code
CVE-2015-0555
Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code vi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Samsung iPOLiS - ReadConfigValue Remote Code Execution2015-04-14 · remote · windows
- Samsung iPOLiS 1.12.2 - iPOLiS XnsSdkDeviceIpInstaller ActiveX WriteConfigValue (PoC)2015-02-22 · dos · windows
Impact
Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the (1) ReadConfigValue or (2) WriteConfigValue function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Ipolis Device Manager | Version 1.12.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/131421/Samsung-iPOLiS-1.12.2-ReadConfigValue-Remote-Code-Execution.html
- http://seclists.org/fulldisclosure/2015/Feb/81
- http://packetstormsecurity.com/files/131421/Samsung-iPOLiS-1.12.2-ReadConfigValue-Remote-Code-Execution.html
- http://seclists.org/fulldisclosure/2015/Feb/81