CVE-2012-2515 — HIGH (9.3) — White Hats Nepal

Vulnerability Description

Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; GE Intelligent Platforms Proficy HMI/SCADA iFIX 5.0 and 5.1; GE Intelligent Platforms Proficy Pulse 1.0; GE Intelligent Platforms Proficy Batch Execution 5.6; GE Intelligent Platforms SI7 I/O Driver 7.20 through 7.42; and other products, allow remote attackers to execute arbitrary code via a long string in the second argument to the (1) JumpMappedID or (2) JumpURL method.

CVSS Score

9.3

HIGH

AV:N/AC:M/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Emc	Captiva Quickscan Pro	4.6
Emc	Documentum Applicationxtender Desktop	5.4
Ge	Intelligent Platforms Proficy Batch Execution	5.6
Ge	Intelligent Platforms Proficy Historian	3.1
Ge	Intelligent Platforms Proficy Hmi\/Scada Ifix	5.0
Ge	Intelligent Platforms Proficy Pulse	1.0
Ge	Intelligent Platforms Si7 I\/O Driver	7.20

Related Weaknesses (CWE)

CWE-119

References

http://retrogod.altervista.org/9sg_emc_keyhelp.htmlExploit
http://secunia.com/advisories/36905Vendor Advisory
http://secunia.com/advisories/36914Vendor Advisory
http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KVendor Advisory
http://www.securityfocus.com/bid/36546Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-02.pdfUS Government Resource
http://www.vupen.com/english/advisories/2009/2793
http://www.vupen.com/english/advisories/2009/2795
http://retrogod.altervista.org/9sg_emc_keyhelp.htmlExploit
http://secunia.com/advisories/36905Vendor Advisory
http://secunia.com/advisories/36914Vendor Advisory
http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KVendor Advisory
http://www.securityfocus.com/bid/36546Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-02.pdfUS Government Resource
http://www.vupen.com/english/advisories/2009/2793

FAQ

What is CVE-2012-2515?

CVE-2012-2515 is a vulnerability with a CVSS score of 9.3 (HIGH). Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXte...

How severe is CVE-2012-2515?

CVE-2012-2515 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-2515?

Check the references section above for vendor advisories and patch information. Affected products include: Emc Captiva Quickscan Pro, Emc Documentum Applicationxtender Desktop, Ge Intelligent Platforms Proficy Batch Execution, Ge Intelligent Platforms Proficy Historian, Ge Intelligent Platforms Proficy Hmi\/Scada Ifix.