CVE-2012-0267

CVE-2012-0267 describes a critical remote code execution vulnerability in the NTR ActiveX Control, specifically affecting versions prior to 2.0.4.8. An attacker can exploit the StopModule method by crafting a malicious lModule parameter, leading to the use of an arbitrary memory address as a function pointer. This vulnerability carries a CVSS score of 9.3, indicating a severe risk with network-based attacks requiring medium complexity but resulting in complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a Metasploit module exists, confirming exploitability, yet there is minimal community discussion or media coverage surrounding this decade-old flaw.