← Vulnerability feed

Vulnerability record · CVE-2012-2515 · published 5 July 2012

CVE-2012-2515: Emc captiva quickscan pro memory buffer overflow vulnerability

Emc · Captiva Quickscan Pro

Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; GE Intelligent Platforms Proficy HMI/SCADA iFIX 5.0 and 5.1; GE Intelligent Platforms Proficy Pulse 1.0; GE Intelligent Platforms Proficy Batch Execution 5.6; GE Intelligent Platforms SI7 I/O Driver 7.20 through 7.42; and other products, allow remote attackers to execute arbitrary code via a long string in the second argument to the (1) JumpMappedID or (2) JumpURL method.

9.3 CVSS 2.0 High EPSS 28% · top 2.0% CWE-119 · Memory buffer overflow
9.3CVSS 2.0 base score
28%EPSS exploitation probability, 30 days
NoNot in CISA KEV
7Affected product versions listed by NVD
16References, 4 tagged exploit
16 Jun 2026Last modified by NVD

Description

Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; GE Intelligent Platforms Proficy HMI/SCADA iFIX 5.0 and 5.1; GE Intelligent Platforms Proficy Pulse 1.0; GE Intelligent Platforms Proficy Batch Execution 5.6; GE Intelligent Platforms SI7 I/O Driver 7.20 through 7.42; and other products, allow remote attackers to execute arbitrary code via a long string in the second argument to the (1) JumpMappedID or (2) JumpURL method.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

7 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://retrogod.altervista.org/9sg_emc_keyhelp.html Exploit
http://secunia.com/advisories/36905 Vendor Advisory
http://secunia.com/advisories/36914 Vendor Advisory
http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/14000/KB14863/en_US/GEIP12-04%20Securi Vendor Advisory
http://www.securityfocus.com/bid/36546 Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-02.pdf US Government Resource
http://www.vupen.com/english/advisories/2009/2793
http://www.vupen.com/english/advisories/2009/2795
http://retrogod.altervista.org/9sg_emc_keyhelp.html Exploit
http://secunia.com/advisories/36905 Vendor Advisory
http://secunia.com/advisories/36914 Vendor Advisory
http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/14000/KB14863/en_US/GEIP12-04%20Securi Vendor Advisory
http://www.securityfocus.com/bid/36546 Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-02.pdf US Government Resource
http://www.vupen.com/english/advisories/2009/2793
http://www.vupen.com/english/advisories/2009/2795

Track CVE-2012-2515 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2012-0229Intelligent platforms proficy historian memory buffer overflow vulnerabilityThe Data Archiver service in GE Intelligent Platforms Proficy Historian 4.5 and earlier allows remote attackers to cause a denial of service (memory …EPSS 5.0%10.0CVE-2011-1918Intelligent platforms proficy historian memory buffer overflow vulnerabilityStack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 al…EPSS 6.3%10.0CVE-2011-1919Intelligent platforms proficy historian memory buffer overflow vulnerabilityMultiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote at…EPSS 4.6%9.3CVE-2012-2516Intelligent platforms proficy batch execution os command injection vulnerabilityAn ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1…EPSS 40%7.1CVE-2013-2811Catapultsoftware catapult dnp3 i\/o driver improper input validation vulnerabilityThe (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (ak…EPSS 1.8%4.7CVE-2013-2823Catapultsoftware catapult dnp3 i\/o driver improper input validation vulnerabilityThe (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (ak…EPSS 0.76%4.3CVE-2011-3320Intelligent platforms proficy historian cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remo…EPSS 0.91%8.8CVE-2026-8452Citrix NetScaler ADC and Gateway memory buffer overflow causes DoSCVE-2026-8452 is a memory buffer overflow (CWE-119) in Citrix NetScaler ADC and NetScaler Gateway that leads to unpredictable or erroneous behavior a…KEVEPSS 1.0%analysed

Source: NIST National Vulnerability Database (record CVE-2012-2515), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.