CVE-2010-1223
Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute...
Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the ws_man/xosoapapi.asmx SOAP endpoint or (2) a long string to the entry_point.aspx service.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the ws_man/xosoapapi.asmx SOAP endpoint or (2) a long string to the entry_point.aspx service.
- Record
CVE-2010-1223- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the ws_man/xosoapapi.asmx SOAP endpoint or (2) a long string to the entry_point.aspx service.
- Record
CVE-2010-1223- Updated
- 2026-11-02
EUVDEUVD-2010-1253 No score
Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the ws_man/xosoapapi.asmx SOAP endpoint or (2) a long string to the entry_point.aspx service.
- Record
EUVD-2010-1253- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jvcx-mvrg-5xrg No score
Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute...
Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the ws_man/xosoapapi.asmx SOAP endpoint or (2) a long string to the entry_point.aspx service.
- Record
GHSA-jvcx-mvrg-5xrg- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1223 is a high vulnerability (CVSS 10.0) in Ca Xosoft Content Distribution, published April 7, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 16.8%, the 97th percentile. No source names a fixed version.
References
securityfocus.com/bid/39238
support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=232869
zerodayinitiative.com/advisories/ZDI-10-065
nvd.nist.gov/vuln/detail/CVE-2010-1223
github.com/advisories/GHSA-jvcx-mvrg-5xrg