Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Dmitry Evdokimov

#27133of 53,635
9.3Total CVSS
Vulnerabilities · 1
PT-2012-5659
9.3
2012-09-15
Asus · Ipswcom.Dll · CVE-2012-4924
**Name of the Vulnerable Software and Affected Versions** ASUS Net4Switch version 1.0.0020 ipswcom.dll ActiveX component version 1.0.0.1 **Description** The issue is related to a buffer overflow in the CxDbgPrint function within the ipswcom.dll ActiveX component. This allows remote attackers to execute arbitrary code by providing a long parameter to the `Alert` method. **Recommendations** For ASUS Net4Switch version 1.0.0020, consider disabling the `Alert` method in the ipswcom.dll ActiveX component until a patch is available. For ipswcom.dll ActiveX component version 1.0.0.1, restrict access to the CxDbgPrint function to minimize the risk of exploitation.