CVE-2012-0284

Cisco Linksys PlayerPT <1.0.0.15 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ Internet video camera allows remote attackers to execute arbitrary code via a long URL in the first argument (aka the sURL argument).

Exploits (4)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/20202
exploitdb WORKING POC VERIFIED
by rgod · textdoswindows
https://www.exploit-db.com/exploits/18641
metasploit WORKING POC NORMAL
by Carsten Eiram, juan vazquez · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/cisco_playerpt_setsource_surl.rb
metasploit WORKING POC NORMAL
by rgod, juan vazquez · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/cisco_playerpt_setsource.rb

Scores

EPSS 0.7316
EPSS Percentile 98.8%

Details

CWE
CWE-119
Status published
Products (1)
cisco/linksys_playerpt_activex_control 1.0.0.15
Published Jul 19, 2012
Tracked Since Feb 18, 2026