CVE-2012-0284
Cisco Linksys PlayerPT <1.0.0.15 - Buffer Overflow
Title source: llmDescription
Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ Internet video camera allows remote attackers to execute arbitrary code via a long URL in the first argument (aka the sURL argument).
Exploits (4)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/20202
metasploit
WORKING POC
NORMAL
by Carsten Eiram, juan vazquez · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/cisco_playerpt_setsource_surl.rb
metasploit
WORKING POC
NORMAL
by rgod, juan vazquez · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/cisco_playerpt_setsource.rb
References (5)
Scores
EPSS
0.7316
EPSS Percentile
98.8%
Details
CWE
CWE-119
Status
published
Products (1)
cisco/linksys_playerpt_activex_control
1.0.0.15
Published
Jul 19, 2012
Tracked Since
Feb 18, 2026