Unscored severity · published Nov 17, 2012
CVE-2012-5896
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers…
–
CVSS
68.7%
EPSS
No
On KEV
Description
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized pointer."
Exploitation
Is it being used?
Exploit prediction (EPSS)68.7% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Intrust · Quest
through 10.4.0.853; 10.1; 10.2.5; 10.3; 10.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5896
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5896
Exploit
http://archives.neohapsis.com/archives/bugtraq/2012-03/0153.html
Exploit
http://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/browser/intrust_annotatex_add.rb
osvdb.org
http://osvdb.org/80662
packetstormsecurity.org
http://packetstormsecurity.org/files/111312/Quest-InTrust-10.4.x-Annotation-Objects-Code-Execution.html
Exploit
http://packetstormsecurity.org/files/111853/Quest-InTrust-Annotation-Objects-Uninitialized-Pointer.html
Vendor Advisory
http://secunia.com/advisories/48566
More from Intrust
–
CVE-2012-5897
The (1) SimpleTree and (2) ReportTree classes in the ARDoc ActiveX control (ARDoc.dll) in Quest InTrust 10.4.0.853 and earlier do not properly implement the SaveToFile method,…