PT-2025-34287 · Undefined · Undefined

Published 2025-08-21 · Updated 2025-08-21 · CVE-2010-20112

NVD

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Amlib’s NetOpacs webquery.dll contains a stack-based buffer overflow vulnerability triggered by improper handling of HTTP GET parameters. Specifically, the application fails to enforce bounds on input supplied to the app parameter, allowing excessive data to overwrite memory structures including the Structured Exception Handler (SEH). Additionally, malformed parameter names followed by an equals sign may result in unintended control flow behavior. This vulnerability is exposed through IIS and affects legacy Windows deployments

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2010-20112

Affected Products

Undefined

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2010-20112 · Security Note
• https://exploit-db.com/exploits/16793 · Note
• https://fortiguard.com/encyclopedia/ips/24002 · Note
• https://vulncheck.com/advisories/amlibweb-netopacs-stack-buffer-overflow · Note
• https://amlib.co.uk/product/product.aspx?menuId=top_products · Note
• https://advisories.checkpoint.com/defense/advisories/public/2013/cpai-2013-1344.html · Note
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/amlibweb_webquerydll_app.rb · Note