« Volver al listado

CVE-2012-4068

Estado: ModificadaAlta (7.5)—

Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a crafted string associated with date and time data.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Citrix — Provisioning Services

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-4068",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-07-26T19:55:04.810",
  "references": [
    {
      "url": "http://osvdb.org/81664",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.citrix.com/article/ctx133039",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1027004",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=979",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75311",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/81664",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.citrix.com/article/ctx133039",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1027004",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=979",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75311",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a crafted string associated with date and time data."
    },
    {
      "lang": "es",
      "value": "Un desbordamiento de búfer basado en memoria dinámica ('heap') en el servicio de SoapServer en Citrix Provisioning Services v5.0, v5.1, v5.6, v5.6 SP1, v6.0, y v6.1 permite a atacantes remotos ejecutar código de su elección a través de una cadena hecha a mano asociada con los datos de fecha y hora.\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:44:22.057",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:citrix:provisioning_services:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B024564E-26BC-400B-A4FF-69E01D030B0E"
            },
            {
              "criteria": "cpe:2.3:a:citrix:provisioning_services:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69F3EE98-D3A9-4D41-A52E-F8579FAF3D07"
            },
            {
              "criteria": "cpe:2.3:a:citrix:provisioning_services:5.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C87C9440-780C-4A4C-8DA8-6E01FE9D8B08"
            },
            {
              "criteria": "cpe:2.3:a:citrix:provisioning_services:5.6:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A8A8EE11-52AF-405F-8B6A-51E088A941CC"
            },
            {
              "criteria": "cpe:2.3:a:citrix:provisioning_services:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8C84431E-0937-4DDE-A29B-E1030F21AAE1"
            },
            {
              "criteria": "cpe:2.3:a:citrix:provisioning_services:6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA5DD391-5B22-48FE-948E-D9DA78D3D82F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}