CVE-2012-0708 | BDVDB-2026-49885 Detail

Description#

Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attackers to execute arbitrary code via a crafted web page that leverages a RegisterSchemaRepoFromFileByDbSet function-prototype mismatch.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id?1026958
https://exchange.xforce.ibmcloud.com/vulnerabilities/73492
http://osvdb.org/81443
http://www.ibm.com/support/docview.wss?uid=swg21591705
http://www.securityfocus.com/bid/53170
http://secunia.com/advisories/48933

Exploit#

No public exploit known

History#

Version 12012-04-22Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.