CVE-2012-0985 - CVE House
Back to Database
Status published Critical CVE-2012-0985

Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0...

Vulnerability Description

Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.00_64, 1.0.1, 2.0, and 3.0; SmartWi Connection Utility 4.7, 4.7.4, 4.8, 4.9, 4.10, and 4.11; and VAIO Easy Connect software 1.0.0 and 1.1.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the second argument of the (1) SetTmpProfileOption or (2) ConnectToNetwork method.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-0985

Credits & Attribution

No credits recorded in the NVD database.

References

More from sony

View All →
CVE-2022-27094
Sony PlayMemories Home v6.0 contains an unquoted service path which...
Medium 6.7
CVE-2021-38544
Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers...
Medium 5.9
CVE-2019-19364
A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe...
High 7.8
CVE-2019-15744
The Sony Xperia Xperia XZs Android device with a build...
Low 3.3
CVE-2019-15743
The Sony Xperia Touch Android device with a build fingerprint...
Medium 5.5

Affected Vendor

Affected Software

smartwi connection utillity, vaio easy connect, vaio pc wireless lan wizard, vaio wireless wizard
Vulnerable Versions:
4.7, 4.7.4, 4.8, 4.9, 4.10, 4.11, 1.0.0, 1.1.0, 1.0, 1.00, 1.00_64, 1.01, 2.0, 3.0

Timeline

Official Publish: June 7th, 2012
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.