Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2012-4750: EzServer 7.0 may let attackers run code remotely
CVE-2012-4750 · published 6 years ago
Summary
EzServer 7.0 has a flaw in the part of the program that copies incoming special requests (called AMF). A remote attacker could exploit this to run any code they choose on the server or cause it to stop working. Install the vendor’s security update and limit access to the server until the patch is applied.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ezhometech | ezserver |
7.0 cpe:2.3:a:ezhometech:ezserver:7.0:*:*:*:*:*:*:* |
Original advisory text
A Code Execution vulnerability exists in the memcpy function when processing AMF requests in Ezhometech EzServer 7.0, which could let a remote malicious user execute arbitrary code or cause a Denia...
A Code Execution vulnerability exists in the memcpy function when processing AMF requests in Ezhometech EzServer 7.0, which could let a remote malicious user execute arbitrary code or cause a Denial of Service
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79267 Third Party Advisory VDB Entry
- https://packetstormsecurity.com/files/117391/Ezhometech-EzServer-7.0-Remote-Heap... Third Party Advisory VDB Entry
- https://www.securityfocus.com/archive/1/524430 Exploit Third Party Advisory VDB Entry
- https://www.securityfocus.com/bid/55938 Third Party Advisory VDB Entry
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-119Buffer Overflow
Timeline
Published13 Jan 2020
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-2012-4750 · NVD
Track software like this
Free during beta