{"vulnerability": "CVE-2012-2175", "sightings": [{"uuid": "fd56110c-698b-4178-8884-8a89ae50fc54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2175", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "964a1e8a-7601-487c-a70d-5523637ce0f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2175", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:04.000000Z"}, {"uuid": "e2253b2d-98ea-453a-943c-df1f86b13a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2175", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/inotes_dwa85w_bof.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "fb0cf3df-7d58-4774-b6f5-00359898e864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-2175", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/23736", "content": "", "creation_timestamp": "2012-12-31T00:00:00.000000Z"}, {"uuid": "b1ae7468-6c71-44cb-8e4f-9308f438283c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2175", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/inotes_dwa85w_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Gaurav Baruah\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a buffer overflow vulnerability on the UploadControl\\n          ActiveX. The vulnerability exists in the handling of the \\\"Attachment_Times\\\"\\n          property, due to the insecure usage of the _swscanf. The affected ActiveX is\\n          provided by the dwa85W.dll installed with the IBM Lotus iNotes ActiveX installer.\\n\\n          This module has been tested successfully on IE6-IE9 on Windows XP, Vista and 7,\\n          using the dwa85W.dll 85.3.3.0 as installed with Lotus Domino 8.5.3.\\n\\n          In order to bypass ASLR the no aslr compatible module dwabho.dll is used. This one\\n          is installed with the iNotes ActiveX.\", \"disclosure_date\": \"2012-06-01\", \"fullname\": \"exploit/windows/browser/inotes_dwa85w_bof\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"IBM Lotus iNotes dwa85W ActiveX Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/inotes_dwa85w_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/inotes_dwa85w_bof\", \"references\": [\"CVE-2012-2175\", \"OSVDB-82755\", \"BID-53879\", \"ZDI-12-132\", \"URL-http://www-304.ibm.com/support/docview.wss?uid=swg21596862\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\", \"IE 6 on Windows XP SP3\", \"IE 7 on Windows XP SP3\", \"IE 8 on Windows XP SP3\", \"IE 7 on Windows Vista\", \"IE 8 on Windows Vista\", \"IE 8 on Windows 7\", \"IE 9 on Windows 7\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:04.599641Z"}]}