CVE-2019-12812
CRITICALCVSS 9.8/10EPSS 2.73%
Last modified
CVE-2019-12812 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. MyBuilder viewer before 6.2.2019.814 allow an attacker to execute arbitrary command via specifically crafted configuration file. This can be leveraged for code execution.. EPSS estimates a 2.73% chance of exploitation in the next 30 days.
Description
MyBuilder viewer before 6.2.2019.814 allow an attacker to execute arbitrary command via specifically crafted configuration file. This can be leveraged for code execution.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Activesoft | Mybuilder | < 6.2.2019.814 |
References
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35155Third Party Advisory, VDB Entry
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35155Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-12812?
MyBuilder viewer before 6.2.2019.814 allow an attacker to execute arbitrary command via specifically crafted configuration file. This can be leveraged for code execution.
How severe is CVE-2019-12812?
CVE-2019-12812 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 2.73% probability of exploitation in the next 30 days.
How do I fix CVE-2019-12812?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-12807Alzip 10.83 and earlier version contains a stack-based buffe…7.8
- CVE-2019-12808ALTOOLS update service 18.1 and earlier versions contains a …7.8
- CVE-2019-12809Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versi…8.8
- CVE-2019-1281Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-12810A memory corruption vulnerability exists in the .PSD parsing…
- CVE-2019-12811ActiveX Control in MyBuilder before 6.2.2019.814 allow an at…9.8
- CVE-2019-12813An issue was discovered in Digital Persona U.are.U 4500 Fing…
- CVE-2019-12814A Polymorphic Typing issue was discovered in FasterXML jacks…5.9
- CVE-2019-12815An arbitrary file copy vulnerability in mod_copy in ProFTPD …9.8
- CVE-2019-12816Modules.cpp in ZNC before 1.7.4-rc1 allows remote authentica…
- CVE-2019-12817arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel b…7
- CVE-2019-12818An issue was discovered in the Linux kernel before 4.20.15. …
Are you affected by CVE-2019-12812?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST