CVE-2012-2515
Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1;…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 27.6%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; GE Intelligent Platforms Proficy HMI/SCADA iFIX 5.0 and 5.1; GE Intelligent Platforms Proficy Pulse 1.0; GE Intelligent Platforms Proficy Batch Execution 5.6; GE Intelligent Platforms SI7 I/O Driver 7.20 through 7.42; and other products, allow remote attackers to execute arbitrary code via a long string in the second argument to the (1) JumpMappedID or (2) JumpURL method.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 27.59% probability · 98th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- emc/captiva quickscan pro · emc/documentum applicationxtender desktop · ge/intelligent platforms proficy batch execution · ge/intelligent platforms proficy historian · ge/intelligent platforms proficy hmi\/scada ifix · ge/intelligent platforms proficy pulse · ge/intelligent platforms si7 i\/o driver
- Source
- ics-cert@hq.dhs.gov
EPSS 27.6% since 4 November 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://retrogod.altervista.org/9sg_emc_keyhelp.htmlExploit
- http://secunia.com/advisories/36905Vendor Advisory
- http://secunia.com/advisories/36914Vendor Advisory
- http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/14000/KB14863/en_US/GEIP12-04%20Security%20Advisory%20-%20Proficy%20HTML%20Help.pdfVendor Advisory
- http://www.securityfocus.com/bid/36546Exploit
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-02.pdfUS Government Resource
- http://www.vupen.com/english/advisories/2009/2793
- http://www.vupen.com/english/advisories/2009/2795
- http://retrogod.altervista.org/9sg_emc_keyhelp.htmlExploit
- http://secunia.com/advisories/36905Vendor Advisory
- http://secunia.com/advisories/36914Vendor Advisory
- http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/14000/KB14863/en_US/GEIP12-04%20Security%20Advisory%20-%20Proficy%20HTML%20Help.pdfVendor Advisory
- http://www.securityfocus.com/bid/36546Exploit
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-02.pdfUS Government Resource
- http://www.vupen.com/english/advisories/2009/2793
- http://www.vupen.com/english/advisories/2009/2795
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.