PT-2012-2149 · Powerproduction · Storyboard Quick

Published 2012-09-15 · Updated 2017-08-29 · CVE-2011-5172

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions StoryBoard Quick version 6 Build 3786

Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by providing a long string in the string element field in a frame XML file.

Recommendations For StoryBoard Quick version 6 Build 3786, update to a version that fixes this issue to prevent exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-5172

Affected Products

Storyboard Quick

References · 6

• 🔥 https://exploit-db.com/exploits/18186 · Exploit
• 🔥 http://exploit-db.com/exploits/18186 · Exploit
• http://secunia.com/advisories/47045 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-5172 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71574 · Note
• http://security-assessment.com/files/documents/advisory/Storyboard_Quick6-Stack_Buffer_Overflow.pdf · Note