« Volver al listado

CVE-2012-0227

Estado: ModificadaAlta (9.3)—

Buffer overflow in the VSFlex7.VSFlexGrid ActiveX control in ComponentOne FlexGrid 7.1, as used in Open Automation Software OPC Systems.NET, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long archive file name argument to the Archive method.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Componentone — FlexgridOpcsystems — Opcsystems.net

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-0227",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-10-12T20:55:02.083",
  "references": [
    {
      "url": "http://dsecrg.com/pages/vul/show.php?id=406",
      "tags": [
        "Exploit"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/51601",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-012-01A.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72604",
      "source": "cret@cert.org"
    },
    {
      "url": "http://dsecrg.com/pages/vul/show.php?id=406",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/51601",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-012-01A.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72604",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the VSFlex7.VSFlexGrid ActiveX control in ComponentOne FlexGrid 7.1, as used in Open Automation Software OPC Systems.NET, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long archive file name argument to the Archive method."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en el control ActiveX VSFlex7.VSFlexGrid en ComponentOne FlexGrid v7.1, como el usado en Open Automation Software OPC Systems.NET, permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección mediante un nombre del fichero largo como argumento sobre el método Archive."
    }
  ],
  "lastModified": "2026-06-16T23:36:56.893",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:componentone:flexgrid:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E03BA33F-8064-4D7C-9613-789CB091A4F2"
            },
            {
              "criteria": "cpe:2.3:a:opcsystems:opcsystems.net:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53CFC2C0-C136-4C67-B927-28F81600AEF8",
              "versionEndIncluding": "4.0"
            },
            {
              "criteria": "cpe:2.3:a:opcsystems:opcsystems.net:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A39574D0-B696-4383-8EA1-C547B644F45F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorImpact": "Per: http://www.us-cert.gov/control_systems/pdf/ICSA-12-012-01A.pdf\r\n\r\n'AFFECTED PRODUCTS\r\nAll versions of OPC Sytems.NET prior to Version 5.0 are affected.'",
  "sourceIdentifier": "cret@cert.org"
}