VULNERABILITY INTELLIGENCE
CVE-2012-0267
CVSS score9.3 HIGH
EPSS probability38.52%
CISA KEVNot currently listed
Published2012-01-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer.
Weakness classification
- CWE-20: Improper Input Validation