CVE-2011-10012

HIGH

NetOp v9.5 - Buffer Overflow

Title source: llm

Description

NetOp (now part of Impero Software) Remote Control Client v9.5 is vulnerable to a stack-based buffer overflow when processing .dws configuration files. If a .dws file contains a string longer than 520 bytes, the application fails to perform proper bounds checking, allowing an attacker to execute arbitrary code when the file is opened.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/18697
exploitdb WORKING POC VERIFIED
by chap0 · perllocalwindows
https://www.exploit-db.com/exploits/17223
metasploit WORKING POC NORMAL
by Ruben Alejandro · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/netop.rb

Scores

CVSS v4 8.4
EPSS 0.0815
EPSS Percentile 92.2%
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Details

CWE
CWE-121
Status published
Products (1)
NetOp/Remote Control Client 9.5
Published Aug 13, 2025
Tracked Since Feb 18, 2026