CVE-2012-4068

https://notcve.org/view.php?id=CVE-2012-4068

Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a crafted string associated with date and time data. Un desbordamiento de búfer basado en memoria dinámica ('heap') en el servicio de SoapServer en Citrix Provisioning Services v5.0, v5.1, v5.6, v5.6 SP1, v6.0, y v6.1 permite a atacantes remotos ejecutar código de su elección a través de una cadena hecha a mano asociada con los datos de fecha y hora. • http://osvdb.org/81664 http://support.citrix.com/article/ctx133039 http://www.securitytracker.com/id?1027004 http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=979 https://exchange.xforce.ibmcloud.com/vulnerabilities/75311 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •