PT-2012-3911 · Skincrafter · Skincrafter

Saurabh Sharma · Publicado 2012-05-21 · Atualizado 2017-12-05 · CVE-2012-2271

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SkinCrafter version 3.0

Description A buffer overflow issue exists in the InitLicenKeys function in a certain ActiveX control in SkinCrafter3 vs2005.dll, allowing remote attackers to execute arbitrary code via a long string in the first argument, also known as the reg name argument.

Recommendations For SkinCrafter version 3.0, consider disabling the InitLicenKeys function as a temporary workaround until a patch is available. Restrict access to the SkinCrafter3 vs2005.dll module to minimize the risk of exploitation. Avoid using long strings in the reg name argument in the affected ActiveX control until the issue is resolved.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-2271

Produtos afetados

Skincrafter

Referências · 6

• 🔥 https://exploit-db.com/exploits/35694 · Exploit
• 🔥 http://exploit-db.com/exploits/18892 · Exploit
• 🔥 https://exploit-db.com/exploits/18892 · Exploit
• http://osvdb.org/82086 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2271 · Nota de Segurança
• http://securityfocus.com/bid/53611 · Nota