CVE-2017-12969
Severity CVSS v4.0:
Pending analysis
Type:
CWE-119
Buffer Errors
Publication date:
10/11/2017
Last modified:
20/04/2025
Description
Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of service (heap corruption and crash) or execute arbitrary code via a long string to the open method.
Impact
Base Score 3.x
8.80
Severity 3.x
HIGH
Base Score 2.0
6.80
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:avaya:ip_office_contact_center:9.1:sp11:*:*:*:*:*:* | ||
| cpe:2.3:a:avaya:ip_office_contact_center:9.1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:avaya:ip_office_contact_center:9.1.0.2209.1540:*:*:*:*:*:*:* | ||
| cpe:2.3:a:avaya:ip_office_contact_center:9.1.6:*:*:*:*:*:*:* | ||
| cpe:2.3:a:avaya:ip_office_contact_center:9.1.7:*:*:*:*:*:*:* | ||
| cpe:2.3:a:avaya:ip_office_contact_center:9.1.8:*:*:*:*:*:*:* | ||
| cpe:2.3:a:avaya:ip_office_contact_center:9.1.9:*:*:*:*:*:*:* | ||
| cpe:2.3:a:avaya:ip_office_contact_center:10.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:avaya:ip_office_contact_center:10.0.0.3-8600.1705:*:*:*:*:*:*:* | ||
| cpe:2.3:a:avaya:ip_office_contact_center:10.1:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://downloads.avaya.com/css/P8/documents/101044091
- http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-%28IPO%29-v9.1.0-10.1-VIEWERCTRL-ACTIVE-X-BUFFER-OVERFLOW-0DAY.txt
- http://packetstormsecurity.com/files/144882/Avaya-IP-Office-IPO-10.1-Active-X-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2017/Nov/17
- http://www.securityfocus.com/bid/101667
- https://www.exploit-db.com/exploits/43120/
- http://downloads.avaya.com/css/P8/documents/101044091
- http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-%28IPO%29-v9.1.0-10.1-VIEWERCTRL-ACTIVE-X-BUFFER-OVERFLOW-0DAY.txt
- http://packetstormsecurity.com/files/144882/Avaya-IP-Office-IPO-10.1-Active-X-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2017/Nov/17
- http://www.securityfocus.com/bid/101667
- https://www.exploit-db.com/exploits/43120/



