CVE-2011-10012
HIGHNetOp v9.5 - Buffer Overflow
Title source: llmDescription
NetOp (now part of Impero Software) Remote Control Client v9.5 is vulnerable to a stack-based buffer overflow when processing .dws configuration files. If a .dws file contains a string longer than 520 bytes, the application fails to perform proper bounds checking, allowing an attacker to execute arbitrary code when the file is opened.
Exploits (3)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/18697
exploitdb
WORKING POC
VERIFIED
by chap0 · perllocalwindows
https://www.exploit-db.com/exploits/17223
metasploit
WORKING POC
NORMAL
by Ruben Alejandro · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/netop.rb
References (7)
Scores
CVSS v4
8.4
EPSS
0.0815
EPSS Percentile
92.2%
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Details
CWE
CWE-121
Status
published
Products (1)
NetOp/Remote Control Client
9.5
Published
Aug 13, 2025
Tracked Since
Feb 18, 2026