CVE-2012-6275

CVE-2012-6275 describes multiple stack-based buffer overflows in the AntDS.exe component of BigAntSoft BigAnt IM Message Server. These vulnerabilities, stemming from malformed filename headers in SCH requests or userid components in DUPF requests, allow remote, unauthenticated attackers to achieve complete compromise of confidentiality, integrity, and availability. With a CVSS score of 10.0, this critical vulnerability has readily available exploit code, including a Metasploit module, though it is not currently listed on CISA's KEV catalog. Despite the high severity and exploit availability, there is minimal community discussion or media coverage surrounding this CVE.