Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC…

1. 2012-03-22 First public exploit (Metasploit exploit/windows/browser/cisco_playerpt_setsource)
2. 2012-07-19 Published

36.32% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).

• Metasploit exploit/windows/browser/cisco_playerpt_setsource_surl Cisco Linksys PlayerPT ActiveX Control SetSource sURL Argument Buffer Overflow metasploit exploit, normal rank, 2012-07-17
• Metasploit exploit/windows/browser/cisco_playerpt_setsource Cisco Linksys PlayerPT ActiveX Control Buffer Overflow metasploit exploit, normal rank, 2012-03-22
• EDB-20202 Cisco Linksys PlayerPT - ActiveX Control SetSource sURL argument Buffer Overflow (Metasploit) remote, 2012-08-03
• EDB-18641 Cisco Linksys WVC200 Wireless-G PTZ Internet Video Camera PlayerPT - ActiveX Control PlayerPT.ocx sprintf Buffer Overflow (PoC) dos, 2012-03-22

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

• secunia.com /secunia_research/2012-25/

  vendor-advisory

• exchange.xforce.ibmcloud.com /vulnerabilities/77085

  vdb-entry

• archives.neohapsis.com /archives/bugtraq/2012-07/0113.html

  mailing-list, broken-link

• securityfocus.com /bid/54588

  vdb-entry, third-party-advisory

• securitytracker.com /id?1027259

  vdb-entry, third-party-advisory

• CVE List CVE-2012-0284
• NVD CVE-2012-0284

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.