CVE-2012-10043

CVE-2012-10043 describes a critical stack-based buffer overflow in ActFax Server version 4.32, specifically within the "Import Users from File" functionality of its client interface. This vulnerability arises from inadequate validation of tab-delimited fields in .exp files, leading to unsafe use of strcpy() during CSV parsing. With a CVSS score of 9.3, it carries a high severity, allowing an attacker to achieve arbitrary code execution and full system compromise by crafting a malicious .exp file and tricking a user into importing it. While user interaction is required, a Metasploit module exists, indicating readily available exploit code, though there is no evidence of active exploitation or significant community discussion.