PT-2012-4417 · Markany+1 · Markany Contentsafer+1

Stefan Schurtz · Published 2012-08-24 · Updated 2012-08-29 · CVE-2012-2990

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MarkAny ContentSAFER versions prior to 1.4.2012.508 Samsung KIES versions prior to 2.3.2.12074 13 13

Description The issue allows remote attackers to download and execute an arbitrary program onto a client machine via a crafted HTML document, due to the MASetupCaller ActiveX control not properly implementing unspecified methods.

Recommendations For MarkAny ContentSAFER versions prior to 1.4.2012.508, update to version 1.4.2012.508 or later. For Samsung KIES versions prior to 2.3.2.12074 13 13, update to version 2.3.2.12074 13 13 or later.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2012-2990

Affected Products

Markany Contentsafer

Samsung Kies

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-2990 · Security Note
• http://kb.cert.org/vuls/id/663809 · Patch
• http://krcert.or.kr/kor/data/secNoticeView.jsp?p_bulletin_writing_sequence=931 · Note