CVE-2012-0708

Description

Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attackers to execute arbitrary code via a crafted web page that leverages a RegisterSchemaRepoFromFileByDbSet function-prototype mismatch.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/73492

http://www.securitytracker.com/id?1026958

http://www.securityfocus.com/bid/53170

http://www.ibm.com/support/docview.wss?uid=swg21591705

http://secunia.com/advisories/48933

http://osvdb.org/81443

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3