CVE-2012-0201

IBM Personal Communications 5.9.x-5.9.8 and 6.0.x-6.0.4 - Stack-Based Buffer Overflow via WorkStation Profile String

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2012-0201. PoCs published by Metasploit, including Metasploit module exploits/windows/fileformat/ibm_pcm_ws.

AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in IBM Personal Communications I-Series Access WorkStation 5.9 via a maliciously crafted WorkStation profile file. It bypasses DEP and ASLR on Windows platforms to achieve arbitrary code execution.

Description

Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long profile string in a WorkStation (aka .ws) file.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/18539

This Metasploit module exploits a stack-based buffer overflow in IBM Personal Communications I-Series Access WorkStation 5.9 via a maliciously crafted WorkStation profile file. It bypasses DEP and ASLR on Windows platforms to achieve arbitrary code execution.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Complex
Reliability
Reliable
Target: IBM Personal Communications I-Series Access WorkStation 5.9 (pcsws.exe version 5090.27271.709)
No auth needed
Prerequisites: Victim must open the maliciously crafted WorkStation profile file
devstral-2 · analyzed Feb 16, 2026 Full analysis →
metasploit WORKING POC GREAT
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ibm_pcm_ws.rb

This Metasploit module exploits a stack-based buffer overflow in IBM Personal Communications iSeries Access WorkStation 5.9 via a maliciously crafted WorkStation file. It bypasses DEP and ASLR on Windows platforms to achieve arbitrary code execution.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Complex
Reliability
Reliable
Target: IBM Personal Communications iSeries Access WorkStation 5.9
No auth needed
Prerequisites: A vulnerable version of IBM Personal Communications iSeries Access WorkStation · Ability to deliver a malicious WorkStation file to the target
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Scores

EPSS 0.3718
EPSS Percentile 98.3%

Details

CWE
CWE-119
Status published
Products (3)
ibm/personal_communications 5.9.7.0
ibm/personal_communications 5.9.7.1
ibm/personal_communications 6.0.3.0
Published Mar 02, 2012
Tracked Since Feb 18, 2026