CVE-2012-0985: Buffer Overflow
First published: Thu Jun 07 2012(Updated: )
Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.00_64, 1.0.1, 2.0, and 3.0; SmartWi Connection Utility 4.7, 4.7.4, 4.8, 4.9, 4.10, and 4.11; and VAIO Easy Connect software 1.0.0 and 1.1.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the second argument of the (1) SetTmpProfileOption or (2) ConnectToNetwork method.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sony Smartwi Connection Utillity | =4.7 | |
| Sony Smartwi Connection Utillity | =4.7.4 | |
| Sony Smartwi Connection Utillity | =4.8 | |
| Sony Smartwi Connection Utillity | =4.9 | |
| Sony Smartwi Connection Utillity | =4.10 | |
| Sony Smartwi Connection Utillity | =4.11 | |
| Sony Vaio Easy Connect | =1.0.0 | |
| Sony Vaio Easy Connect | =1.1.0 | |
| Sony VAIO PC Wireless LAN Wizard | =1.0 | |
| Sony Vaio Wireless Wizard | =1.00 | |
| Sony Vaio Wireless Wizard | =1.00_64 | |
| Sony Vaio Wireless Wizard | =1.01 | |
| Sony Vaio Wireless Wizard | =2.0 | |
| Sony Vaio Wireless Wizard | =3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://archives.neohapsis.com/archives/bugtraq/2012-05/0147.html
- http://esupport.sony.com/US/perl/support-info.pl?template_id=1&info_id=946
- http://osvdb.org/82401
- http://secunia.com/advisories/49340
- http://www.exploit-db.com/exploits/18958
- http://www.securityfocus.com/bid/53735
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75978
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-index
- vendor/sony
- canonical/sony smartwi connection utillity
- version/sony smartwi connection utillity/4.7
- version/sony smartwi connection utillity/4.7.4
- version/sony smartwi connection utillity/4.8
- version/sony smartwi connection utillity/4.9
- version/sony smartwi connection utillity/4.10
- version/sony smartwi connection utillity/4.11
- canonical/sony vaio easy connect
- version/sony vaio easy connect/1.0.0
- version/sony vaio easy connect/1.1.0
- canonical/sony vaio pc wireless lan wizard
- version/sony vaio pc wireless lan wizard/1.0
- canonical/sony vaio wireless wizard
- version/sony vaio wireless wizard/1.00
- version/sony vaio wireless wizard/1.00_64
- version/sony vaio wireless wizard/1.01
- version/sony vaio wireless wizard/2.0
- version/sony vaio wireless wizard/3.0