What is the severity of CVE-2012-0227?

CVE-2012-0227 is classified as a high severity vulnerability that can lead to denial of service and potential arbitrary code execution.

How do I fix CVE-2012-0227?

To mitigate CVE-2012-0227, it is recommended to upgrade to a newer version of ComponentOne FlexGrid that does not contain this buffer overflow vulnerability.

What software is affected by CVE-2012-0227?

CVE-2012-0227 affects ComponentOne FlexGrid version 7.1 and the Open Automation Software OPC Systems.NET up to version 4.0.

What kind of attack does CVE-2012-0227 enable?

CVE-2012-0227 allows remote attackers to exploit a buffer overflow, potentially leading to a denial of service or arbitrary code execution.

Can CVE-2012-0227 be exploited remotely?

Yes, CVE-2012-0227 can be exploited remotely via maliciously crafted archive file name arguments.

Vulnerability/
CVE-2012-0227

critical

9.3

CWE

119

12/10/2012

6/8/2024

CVE-2012-0227: Buffer Overflow

First published: Fri Oct 12 2012(Updated: )

Buffer overflow in the VSFlex7.VSFlexGrid ActiveX control in ComponentOne FlexGrid 7.1, as used in Open Automation Software OPC Systems.NET, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long archive file name argument to the Archive method.

Credit: cret@cert.org

Affected Software	Affected Version	How to fix
ComponentOne FlexGrid	=7.1
Opcsystems Opcsystems.net	<=4.0
Opcsystems Opcsystems.net

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2012-0227?
CVE-2012-0227 is classified as a high severity vulnerability that can lead to denial of service and potential arbitrary code execution.
How do I fix CVE-2012-0227?
To mitigate CVE-2012-0227, it is recommended to upgrade to a newer version of ComponentOne FlexGrid that does not contain this buffer overflow vulnerability.
What software is affected by CVE-2012-0227?
CVE-2012-0227 affects ComponentOne FlexGrid version 7.1 and the Open Automation Software OPC Systems.NET up to version 4.0.
What kind of attack does CVE-2012-0227 enable?
CVE-2012-0227 allows remote attackers to exploit a buffer overflow, potentially leading to a denial of service or arbitrary code execution.
Can CVE-2012-0227 be exploited remotely?
Yes, CVE-2012-0227 can be exploited remotely via maliciously crafted archive file name arguments.

collector/nvd-index
agent/softwarecombine
agent/type
agent/references
collector/mitre-cve
source/MITRE
agent/author
agent/severity
agent/weakness
agent/last-modified-date
agent/description
agent/first-publish-date
agent/tags
agent/event
agent/source
vendor/componentone
canonical/componentone flexgrid
version/componentone flexgrid/7.1
vendor/opcsystems
canonical/opcsystems opcsystems.net
version/opcsystems opcsystems.net/4.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2012-0227?
CVE-2012-0227 is classified as a high severity vulnerability that can lead to denial of service and potential arbitrary code execution.
How do I fix CVE-2012-0227?
To mitigate CVE-2012-0227, it is recommended to upgrade to a newer version of ComponentOne FlexGrid that does not contain this buffer overflow vulnerability.
What software is affected by CVE-2012-0227?
CVE-2012-0227 affects ComponentOne FlexGrid version 7.1 and the Open Automation Software OPC Systems.NET up to version 4.0.
What kind of attack does CVE-2012-0227 enable?
CVE-2012-0227 allows remote attackers to exploit a buffer overflow, potentially leading to a denial of service or arbitrary code execution.
Can CVE-2012-0227 be exploited remotely?
Yes, CVE-2012-0227 can be exploited remotely via maliciously crafted archive file name arguments.