PT-2012-2551 · Emc · Emc Autostart

Published 2012-06-01 · Updated 2012-10-30 · CVE-2012-0409

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions EMC AutoStart versions 5.3.x through 5.4.x before 5.4.3

Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted packets. Multiple buffer overflows are present in the affected software.

Recommendations For versions 5.3.x through 5.4.x before 5.4.3, update to version 5.4.3 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-0409

ZDI-12-116

ZDI-12-117

ZDI-12-118

ZDI-12-119

ZDI-12-120

ZDI-12-121

ZDI-12-122

ZDI-12-123

ZDI-12-124

ZDI-12-144

ZDI-12-159

ZDI-12-160

ZDI-12-161

Affected Products

Emc Autostart

References · 17

• https://zerodayinitiative.com/advisories/ZDI-12-117 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-121 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-118 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-123 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-124 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-120 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-144 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-159 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-119 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-161 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-0409 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-160 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-116 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-122 · Security Note
• http://securityfocus.com/archive/1/522835 · Note