CVE-2012-0708: Buffer Overflow
First published: Sun Apr 22 2012(Updated: )
Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attackers to execute arbitrary code via a crafted web page that leverages a RegisterSchemaRepoFromFileByDbSet function-prototype mismatch.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Rational ClearQuest | =7.1.1 | |
| IBM Rational ClearQuest | =7.1.1.1 | |
| IBM Rational ClearQuest | =7.1.1.2 | |
| IBM Rational ClearQuest | =7.1.1.3 | |
| IBM Rational ClearQuest | =7.1.1.4 | |
| IBM Rational ClearQuest | =7.1.2 | |
| IBM Rational ClearQuest | =7.1.2.1 | |
| IBM Rational ClearQuest | =7.1.2.2 | |
| IBM Rational ClearQuest | =7.1.2.3 | |
| IBM Rational ClearQuest | =7.1.2.4 | |
| IBM Rational ClearQuest | =7.1.2.5 | |
| IBM Rational ClearQuest | =7.1.2.6 | |
| IBM Rational ClearQuest | =8.0.0 | |
| IBM Rational ClearQuest | =8.0.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-0708?
CVE-2012-0708 has been assigned a medium severity level as it allows remote code execution through a vulnerable ActiveX control.
How do I fix CVE-2012-0708?
To fix CVE-2012-0708, update IBM Rational ClearQuest to versions 7.1.1.9, 7.1.2.6, or 8.0.0.2 or later.
Who is affected by CVE-2012-0708?
CVE-2012-0708 affects IBM Rational ClearQuest versions prior to 7.1.1.9, 7.1.2.6, and 8.0.0.2.
What components are involved in CVE-2012-0708?
CVE-2012-0708 involves a heap-based buffer overflow in the Ole API of the cqole.dll ActiveX control.
Can CVE-2012-0708 be exploited remotely?
Yes, CVE-2012-0708 can be exploited remotely by attackers through a specially crafted web page.
- agent/references
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm rational clearquest
- version/ibm rational clearquest/7.1.1
- version/ibm rational clearquest/7.1.1.1
- version/ibm rational clearquest/7.1.1.2
- version/ibm rational clearquest/7.1.1.3
- version/ibm rational clearquest/7.1.1.4
- version/ibm rational clearquest/7.1.2
- version/ibm rational clearquest/7.1.2.1
- version/ibm rational clearquest/7.1.2.2
- version/ibm rational clearquest/7.1.2.3
- version/ibm rational clearquest/7.1.2.4
- version/ibm rational clearquest/7.1.2.5
- version/ibm rational clearquest/7.1.2.6
- version/ibm rational clearquest/8.0.0
- version/ibm rational clearquest/8.0.0.1