CVE-2017-5216

MEDIUM

Netop Remote Control <12.21 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow vulnerability in Netop Remote Control versions 11.53, 12.21 and prior. The affected module in the Guest client is the "Import to Phonebook" option. When a specially designed malicious file containing special characters is loaded, the overflow occurs. 12.51 is the fixed version. The Support case ref is 00109744.

References (2)

[Mitigation, Vendor Advisory] http://www.netop.com/fileadmin/netop/resources/products/administration/remote_control/release_notes/NetopRemoteControl_12.51_ModificationNotes_final.pdf

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/95316

Scores

CVSS v3 5.5

EPSS 0.0018

EPSS Percentile 39.0%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE

CWE-119

Status published

Affected Products (2)

netop/remote_control < 12.50

n/a/n/a

Timeline

Published Jan 09, 2017

Tracked Since Feb 18, 2026