CVE-2017-12969

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

10.08%

Published

Nov 9, 2017

Modified

May 12, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBAvaya IP Office (IPO) < 10.1 - ActiveX Buffer Overflow TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of service (heap corruption and crash) or execute arbitrary code via a long string to the open method.

Weaknesses (CWE)

CWE-119

Affected Products (10)

avaya · ip_office_contact_centervulnerable

· ip_office_contact_center

References (12)

http://downloads.avaya.com/css/P8/documents/101044091

Vendor Advisory

http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-%28IPO%29-v9.1.0-10.1-VIEWERCTRL-ACTIVE-X-BUFFER-OVERFLOW-0DAY.txt

http://packetstormsecurity.com/files/144882/Avaya-IP-Office-IPO-10.1-Active-X-Buffer-Overflow.html

Third Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2017/Nov/17

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/101667

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs