What is CVE-2012-3022?

CVE-2012-3022 is a vulnerability in Canarylabs Trendlink, classified under CWE-264. Published 2013-04-16.

Is CVE-2012-3022 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Canarylabs Trendlink

CVE-2012-3022

The SaveToFile method in a certain ActiveX control in TrendDisplay.dll in Canary Labs TrendLink 9.0.2.27051 and earlier does not properly restrict the creation of files, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted web site.

EPSS: 0.013 (67.3th percentile) — read the EPSS interpretation.

Affected products

Canarylabs Trendlink
N/a — versions n/a

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)

Frequently asked questions

What is CVE-2012-3022?: CVE-2012-3022 is a vulnerability in Canarylabs Trendlink, classified under CWE-264. Published 2013-04-16.
Is CVE-2012-3022 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.