CVE-2012-5896

None

CVSS

—

EPSS

68.7%

Published

Nov 17, 2012

CISA due date

—

The record

The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized pointer."

Affected packages

Ecosystem	Package	Introduced	Fixed