CVE-2012-4333

EUVD-2012-4277
Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter.  NOTE: some of these details are obtained from third party information.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
Affected Products (NVD)
VendorProductVersion
samsungnet-i_viewer
1.37.120316
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/48966
http://www.exploit-db.com/exploits/18765
http://www.securityfocus.com/bid/53193
https://exchange.xforce.ibmcloud.com/vulnerabilities/75070
http://secunia.com/advisories/48966
http://www.exploit-db.com/exploits/18765
http://www.securityfocus.com/bid/53193
https://exchange.xforce.ibmcloud.com/vulnerabilities/75070