CVE-2012-0198

Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file.

Score

CVSS 2.0 9.3 Critical

Status

Modified - psirt@us.ibm.com

Published

2012-03-06

Last modified

2024-08-06

Affected products

• Tivoli Provisioning Manager Express For Software Distribution (Ibm)

References

• http://www.zerodayinitiative.com/advisories/ZDI-12-040/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73033