CVE-2017-12969: Buffer Overflow
Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of service (heap corruption and crash) or execute arbitrary code via a long string to the open method.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2017-12969.
What is the severity of CVE-2017-12969?
The severity of CVE-2017-12969 is high.
What is the affected software for CVE-2017-12969?
The affected software for CVE-2017-12969 is Avaya IP Office Contact Center versions 9.1-sp11, 9.1.0, 9.1.0.2209.1540, 9.1.6, 9.1.7, 9.1.8, 9.1.9, 10.0, 10.0.0.3-8600.1705, and 10.1.
How does CVE-2017-12969 impact the affected software?
CVE-2017-12969 allows remote attackers to cause a denial of service (heap corruption and crash) or execute arbitrary code via a long string to the open method.
Are there any references available for CVE-2017-12969?
Yes, there are references available for CVE-2017-12969. You can find them at the following links: [http://downloads.avaya.com/css/P8/documents/101044091](http://downloads.avaya.com/css/P8/documents/101044091), [http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-(IPO)-v9.1.0-10.1-VIEWERCTRL-ACTIVE-X-BUFFER-OVERFLOW-0DAY.txt](http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-(IPO)-v9.1.0-10.1-VIEWERCTRL-ACTIVE-X-BUFFER-OVERFLOW-0DAY.txt), [http://packetstormsecurity.com/files/144882/Avaya-IP-Office-IPO-10.1-Active-X-Buffer-Overflow.html](http://packetstormsecurity.com/files/144882/Avaya-IP-Office-IPO-10.1-Active-X-Buffer-Overflow.html)