Unscored severity · published Jul 26, 2012
CVE-2012-4068
Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a…
–
CVSS
4.5%
EPSS
No
On KEV
Description
Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a crafted string associated with date and time data.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.5% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PS
Provisioning Services · Citrix
5.0; 5.1; 5.6; 5.6; 6.0; 6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4068
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4068
osvdb.org
http://osvdb.org/81664
Patch
http://support.citrix.com/article/ctx133039
www.securitytracker.com
http://www.securitytracker.com/id?1027004
Patch
http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=979
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/75311
More from Provisioning Services
9.8
CVE-2016-9679
Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer
9.8
CVE-2016-9678
Use-after-free vulnerability in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors
9.8
CVE-2016-9676
Buffer overflow in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors
7.5
CVE-2016-9680
Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive information from kernel memory via unspecified vectors
5.3
CVE-2016-9677
Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive kernel address information via unspecified vectors