{"uuid": "c041aa8a-2963-4afc-8059-334a8dedefad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2176", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/quickr_qp2_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Gaurav Baruah\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a buffer overflow vulnerability on the UploadControl\\n          ActiveX. The vulnerability exists in the handling of the \\\"Attachment_Times\\\"\\n          property, due to the insecure usage of the _swscanf. The affected ActiveX is\\n          provided by the qp2.dll installed with the IBM Lotus Quickr product.\\n\\n          This module has been tested successfully on IE6-IE9 on Windows XP, Vista and 7,\\n          using the qp2.dll 8.1.0.1800. In order to bypass ASLR the no aslr compatible module\\n          msvcr71.dll is used. This one is installed with the qp2 ActiveX.\", \"disclosure_date\": \"2012-05-23\", \"fullname\": \"exploit/windows/browser/quickr_qp2_bof\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"IBM Lotus QuickR qp2 ActiveX Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/quickr_qp2_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/quickr_qp2_bof\", \"references\": [\"CVE-2012-2176\", \"OSVDB-82166\", \"BID-53678\", \"ZDI-12-134\", \"URL-http://www-01.ibm.com/support/docview.wss?uid=swg21596191\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\", \"IE 6 on Windows XP SP3\", \"IE 7 on Windows XP SP3\", \"IE 8 on Windows XP SP3\", \"IE 7 on Windows Vista\", \"IE 8 on Windows Vista\", \"IE 8 on Windows 7\", \"IE 9 on Windows 7\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:13.514667Z"}