CVE-2012-6429
Samsung Kies < 2.5.0.12114_1 - Remote Code Execution via SyncService.dll PrepareSync Password Argument
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-6429. PoCs published by High-Tech Bridge.
AI-analyzed exploit summary This is a VBScript-based proof-of-concept exploit for a remote buffer overflow vulnerability in Samsung Kies. It triggers the vulnerability by passing an overly long string to the 'PrepareSync' method of a specific ActiveX object.
Description
Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123_2_7 allows remote attackers to execute arbitrary code via a long string to the password argument.
Exploits (1)
This is a VBScript-based proof-of-concept exploit for a remote buffer overflow vulnerability in Samsung Kies. It triggers the vulnerability by passing an overly long string to the 'PrepareSync' method of a specific ActiveX object.