CVE-2012-5896
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and...
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized pointer."
Exploit likelihood
What each source reports
NVD Score used
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized pointer."
- Record
CVE-2012-5896- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized pointer."
- Record
CVE-2012-5896- Updated
- 2026-11-02
EUVDEUVD-2012-5770 No score
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized pointer."
- Record
EUVD-2012-5770- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5hpc-qgc3-79p9 No score
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and...
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized pointer."
- Record
GHSA-5hpc-qgc3-79p9- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Quest InTrust 10.4.x - Annotation Objects ActiveX Control 'AnnotateX.dll' Uninitialized Pointer Remote Code Execution | 2012-03-28 |
| Exploit-DB | Quest InTrust - Annotation Objects Uninitialized Pointer (Metasploit) | 2012-04-13 |
| Metasploit | Quest InTrust Annotation Objects Uninitialized Pointer | 2012-03-28 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-5896 is a high vulnerability (CVSS 10.0) in Quest Intrust, published November 17, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 68.7%, the 99th percentile. No source names a fixed version.
References
exploit-db.com/exploits/18674
dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/browser/intrust_annotatex_add.rb
osvdb.org/80662
packetstormsecurity.org/files/111853/Quest-InTrust-Annotation-Objects-Uninitialized-Pointer.html
exchange.xforce.ibmcloud.com/vulnerabilities/74448
archives.neohapsis.com/archives/bugtraq/2012-03/0153.html