CVE-2012-6275

{"id": "CVE-2012-6275", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-02-24T11:48:21.377", "references": [{"url": "http://www.kb.cert.org/vuls/id/990652", "tags": ["US Government Resource"], "source": "cret@cert.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in a DUPF request."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de desbordamiento de b\u00fafer en AntDS.exe en BigAntSoft BigAnt IM Message Server, permiten a atacantes remotos provocar un impacto desconocido a trav\u00e9s de (1)la cabecera de un nombre de archivo en una petici\u00f3n SCH o (2) el componente userid en una petici\u00f3n DUPF."}], "lastModified": "2013-02-25T05:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bigantsoft:bigant_im_message_server:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2B81ACC-15ED-4867-80CA-5C6C061FA4A6"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org"}