Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allo…

published 2012-03-02 14 y ago modified 2026-06-16 4 mo ago also EUVD-2012-0239

cvss: 9.3; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 36.3%; EPSS 36.3% chance of exploitation in 30 days, percentile 98%
public exploits: 2; Metasploit, Exploit-DB

Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long profile string in a WorkStation (aka .ws) file.

Timeline

2012-02-28 First public exploit (Metasploit exploit/windows/fileformat/ibm_pcm_ws)
2012-03-02 Published

Exploit prediction

36.31% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

Metasploit exploit/windows/fileformat/ibm_pcm_ws IBM Personal Communications iSeries Access WorkStation 5.9 Profile metasploit exploit, great rank, 2012-02-28
EDB-18539 IBM Personal Communications I-Series Access Workstation 5.9 - Profile (Metasploit) remote, 2012-02-29
stratsec.net http://www.stratsec.net/Research/Advisories/IBM-Personal-Communications-I-Series-Access-WorkSt referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	9.3	AV:N/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

Sources

CVE List CVE-2012-0201
NVD CVE-2012-0201

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary