CVE-2012-5896
First published: Sat Nov 17 2012(Updated: )
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized pointer."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Quest InTrust | <=10.4.0.853 | |
| Quest InTrust | =10.1 | |
| Quest InTrust | =10.2.5 | |
| Quest InTrust | =10.3 | |
| Quest InTrust | =10.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://archives.neohapsis.com/archives/bugtraq/2012-03/0153.html
- http://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/browser/intrust_annotatex_add.rb
- http://osvdb.org/80662
- http://packetstormsecurity.org/files/111312/Quest-InTrust-10.4.x-Annotation-Objects-Code-Execution.html
- http://packetstormsecurity.org/files/111853/Quest-InTrust-Annotation-Objects-Uninitialized-Pointer.html
- http://secunia.com/advisories/48566
- http://www.exploit-db.com/exploits/18674
- http://www.securityfocus.com/bid/52765
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74448
Frequently Asked Questions
What is the severity of CVE-2012-5896?
CVE-2012-5896 has a critical severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2012-5896?
The fix for CVE-2012-5896 is to upgrade Quest InTrust to a version later than 10.4.0.853.
What products are affected by CVE-2012-5896?
CVE-2012-5896 affects versions of Quest InTrust 10.4.0.853 and earlier, along with 10.2.5, 10.3, and 10.1.
How does CVE-2012-5896 allow for code execution?
CVE-2012-5896 allows remote code execution through improper handling of memory addresses in the Add method of the Annotation Objects Extension ActiveX control.
Is CVE-2012-5896 related to uninitialized pointers?
Yes, CVE-2012-5896 is related to an uninitialized pointer which contributes to its vulnerability.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/author
- agent/severity
- agent/description
- agent/tags
- agent/event
- agent/first-publish-date
- agent/source
- vendor/quest
- canonical/quest intrust
- version/quest intrust/10.4.0.853
- version/quest intrust/10.1
- version/quest intrust/10.2.5
- version/quest intrust/10.3
- version/quest intrust/10.4