### [CVE-2012-0201](https://www.cve.org/CVERecord?id=CVE-2012-0201)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)

### Description

Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long profile string in a WorkStation (aka .ws) file.

### POC

#### Reference
- http://www.exploit-db.com/exploits/18539/
- http://www.metasploit.com/modules/exploit/windows/fileformat/ibm_pcm_ws

#### Github
No PoCs found on GitHub currently.

#### ExploitDB
- https://www.exploit-db.com/exploits/18539

#### Metasploit
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ibm_pcm_ws.rb