PT-2012-4417 · Markany+1 · Markany Contentsafer+1

Stefan Schurtz · Publicado 2012-08-24 · Atualizado 2012-08-29 · CVE-2012-2990

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MarkAny ContentSAFER versions prior to 1.4.2012.508 Samsung KIES versions prior to 2.3.2.12074 13 13

Description The issue allows remote attackers to download and execute an arbitrary program onto a client machine via a crafted HTML document, due to the MASetupCaller ActiveX control not properly implementing unspecified methods.

Recommendations For MarkAny ContentSAFER versions prior to 1.4.2012.508, update to version 1.4.2012.508 or later. For Samsung KIES versions prior to 2.3.2.12074 13 13, update to version 2.3.2.12074 13 13 or later.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2012-2990

Produtos afetados

Markany Contentsafer

Samsung Kies

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-2990 · Nota de Segurança
• http://krcert.or.kr/kor/data/secNoticeView.jsp?p_bulletin_writing_sequence=931 · Nota
• http://kb.cert.org/vuls/id/663809 · Correção