PT-2012-3911 · Skincrafter · Skincrafter

Saurabh Sharma · Published 2012-05-21 · Updated 2017-12-05 · CVE-2012-2271

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SkinCrafter version 3.0

Description A buffer overflow issue exists in the InitLicenKeys function in a certain ActiveX control in SkinCrafter3 vs2005.dll, allowing remote attackers to execute arbitrary code via a long string in the first argument, also known as the reg name argument.

Recommendations For SkinCrafter version 3.0, consider disabling the InitLicenKeys function as a temporary workaround until a patch is available. Restrict access to the SkinCrafter3 vs2005.dll module to minimize the risk of exploitation. Avoid using long strings in the reg name argument in the affected ActiveX control until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-2271

Affected Products

Skincrafter

References · 6

• 🔥 https://exploit-db.com/exploits/35694 · Exploit
• 🔥 http://exploit-db.com/exploits/18892 · Exploit
• 🔥 https://exploit-db.com/exploits/18892 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-2271 · Security Note
• http://osvdb.org/82086 · Note
• http://securityfocus.com/bid/53611 · Note