CVE-2012-0985

Published Jun 7, 2012

Last updated 7 years ago

Overview

Description: Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.00_64, 1.0.1, 2.0, and 3.0; SmartWi Connection Utility 4.7, 4.7.4, 4.8, 4.9, 4.10, and 4.11; and VAIO Easy Connect software 1.0.0 and 1.1.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the second argument of the (1) SetTmpProfileOption or (2) ConnectToNetwork method.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 9.3
Impact score: 10
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-119

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:sony:smartwi_connection_utillity:4.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F377CC9E-6F84-4DFA-8F73-B52C8308D349"
          },
          {
            "criteria": "cpe:2.3:a:sony:smartwi_connection_utillity:4.7.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2B31C08B-549F-4E6F-BE78-1E6647B8DB25"
          },
          {
            "criteria": "cpe:2.3:a:sony:smartwi_connection_utillity:4.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ECD61E13-5B11-4C59-A699-92309622C410"
          },
          {
            "criteria": "cpe:2.3:a:sony:smartwi_connection_utillity:4.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3970B17E-313E-4B56-8C77-D9B6272DFF1F"
          },
          {
            "criteria": "cpe:2.3:a:sony:smartwi_connection_utillity:4.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C59A467B-2755-4416-A3FE-77F52A979506"
          },
          {
            "criteria": "cpe:2.3:a:sony:smartwi_connection_utillity:4.11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "194B3A20-846A-4195-94B3-22A7FF249737"
          },
          {
            "criteria": "cpe:2.3:a:sony:vaio_easy_connect:1.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9F69EE72-5FB2-487D-8773-D4A4BAD38E3F"
          },
          {
            "criteria": "cpe:2.3:a:sony:vaio_easy_connect:1.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7C885DC7-DAFC-41EC-9B21-2D873418FE7E"
          },
          {
            "criteria": "cpe:2.3:a:sony:vaio_pc_wireless_lan_wizard:1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7F31A19C-2E32-4A62-9186-69DE7F71E503"
          },
          {
            "criteria": "cpe:2.3:a:sony:vaio_wireless_wizard:1.00:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F534E845-9FAF-4448-97F7-652B09D2317B"
          },
          {
            "criteria": "cpe:2.3:a:sony:vaio_wireless_wizard:1.00_64:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EA9AF287-B189-42E2-AB26-9F8F76D3096F"
          },
          {
            "criteria": "cpe:2.3:a:sony:vaio_wireless_wizard:1.01:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BCBB8A07-AB5C-4434-B2F6-B735412211C9"
          },
          {
            "criteria": "cpe:2.3:a:sony:vaio_wireless_wizard:2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "50049EAD-6370-40AB-B293-4A4E18E4E2B3"
          },
          {
            "criteria": "cpe:2.3:a:sony:vaio_wireless_wizard:3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BA0139C4-8CD8-4E01-8A55-89BDB38DB195"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References