CVE-2012-6275
UnknownEPSS 46.50%
Last modified
CVE-2012-6275 is a vulnerability of currently unknown severity. Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in a DUPF request.. EPSS estimates a 46.50% chance of exploitation in the next 30 days.
Description
Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in a DUPF request.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Bigantsoft | Bigant Im Message Server | All versions |
References
- http://www.kb.cert.org/vuls/id/990652US Government Resource
- http://www.kb.cert.org/vuls/id/990652US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-6275?
Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in a DUPF request.
How severe is CVE-2012-6275?
Severity scoring for CVE-2012-6275 is pending analysis. The EPSS model estimates a 46.50% probability of exploitation in the next 30 days.
How do I fix CVE-2012-6275?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-6269Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2012-6270Adobe Shockwave Player through 11.6.8.638 allows remote atta…
- CVE-2012-6271Adobe Shockwave Player through 11.6.8.638 allows remote atta…
- CVE-2012-6272Multiple cross-site scripting (XSS) vulnerabilities in Dell …
- CVE-2012-6273SQL injection vulnerability in BigAntSoft BigAnt IM Message …
- CVE-2012-6274BigAntSoft BigAnt IM Message Server does not require authent…
- CVE-2012-6276Directory traversal vulnerability in the web-based managemen…
- CVE-2012-6277Multiple unspecified vulnerabilities in Autonomy KeyView IDO…7.8
- CVE-2012-6278Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2012-6279Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2012-6280Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2012-6281Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
Are you affected by CVE-2012-6275?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST