« Volver al listado

CVE-2012-6558

Estado: ModificadaAlta (9.3)—

Desbordamiento de búfer basado en memoria dinámica en Heaventools PE Explorer v1.99 R6 permite a atacantes remotos ejecutar código arbitrario mediante el valor del tamaño de una cadena en la sección de recursos de un archivo ejecutable portable (PE).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Heaventools — PE Explorer

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-6558",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-05-23T15:55:01.843",
  "references": [
    {
      "url": "http://secunia.com/advisories/49239",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://waleedassar.blogspot.com/2012/05/pe-explorer-heap-overflow-vulnerability.html",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/53618",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75742",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/49239",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://waleedassar.blogspot.com/2012/05/pe-explorer-heap-overflow-vulnerability.html",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/53618",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75742",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in HeavenTools PE Explorer 1.99 R6 allows remote attackers to execute arbitrary code via the size value for a string in the resource section of a Portable Executable (PE) file."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer basado en memoria dinámica en Heaventools PE Explorer v1.99 R6 permite a atacantes remotos ejecutar código arbitrario mediante el valor del tamaño de una cadena en la sección de recursos de un archivo ejecutable portable (PE)."
    }
  ],
  "lastModified": "2026-06-16T23:48:22.220",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:heaventools:pe_explorer:1.99.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14CB8FB5-2340-4080-886C-32DA81F35F87"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}