« Volver al listado

CVE-2012-4711

Estado: ModificadaAlta (10)—

Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted packet.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Wellintech — Kingview

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-4711",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-02-15T12:09:27.820",
  "references": [
    {
      "url": "http://ics-cert.us-cert.gov/advisories/ICSA-13-043-02A",
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://ics-cert.us-cert.gov/pdf/ICSA-13-043-02.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://ics-cert.us-cert.gov/advisories/ICSA-13-043-02A",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://ics-cert.us-cert.gov/pdf/ICSA-13-043-02.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted packet."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de buffer en kingMess.exe v65.20.2003.10300 en WellinTech KingView v6.52, kingMess.exe v65.20.2003.10400 en KingView v6.53, y kingMess.exe v65.50.2011.18049 en KingView v6.55 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (por corrupción de la memoria) mediante un paquete manipulado."
    }
  ],
  "lastModified": "2026-06-16T23:45:37.147",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wellintech:kingview:6.52:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37C00AAD-8824-4F27-8203-EBBDB879772D"
            },
            {
              "criteria": "cpe:2.3:a:wellintech:kingview:6.53:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C256036A-9428-4BD3-BB8D-0192EB219764"
            },
            {
              "criteria": "cpe:2.3:a:wellintech:kingview:6.55:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C657AF50-F338-42FB-80B8-B8B8A7E7AE20"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}