VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Apr 22, 2012· Updated Apr 29, 2026

CVE-2012-0708

CVE-2012-0708

Description

Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attackers to execute arbitrary code via a crafted web page that leverages a RegisterSchemaRepoFromFileByDbSet function-prototype mismatch.

Affected products

14
  • IBM/Rational Clearquest14 versions
    cpe:2.3:a:ibm:rational_clearquest:7.1.1:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:ibm:rational_clearquest:7.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_clearquest:7.1.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_clearquest:7.1.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_clearquest:7.1.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_clearquest:7.1.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_clearquest:7.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_clearquest:7.1.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_clearquest:7.1.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_clearquest:7.1.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_clearquest:7.1.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_clearquest:7.1.2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_clearquest:7.1.2.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_clearquest:8.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_clearquest:8.0.0.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.