PT-2011-3580 · Iconics · Genesis32+1

Blair Strang + 1 · Publicado 2011-05-13 · Atualizado 2017-08-29 · CVE-2011-2089

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GenVersion.dll version 8.0.138.0 in ICONICS BizViz versions prior to 9.22 GenVersion.dll version 8.0.138.0 in GENESIS32 versions prior to 9.22

Description The issue is related to a stack-based buffer overflow in the SetActiveXGUID method within the VersionInfo ActiveX control. This can be exploited by remote attackers to execute arbitrary code by providing a long string in the argument.

Recommendations For ICONICS BizViz versions prior to 9.22, update to version 9.22 or later. For GENESIS32 versions prior to 9.22, update to version 9.22 or later.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-2089

Produtos afetados

Genesis32

Iconics Bizviz

Referências · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/iconics_webhmi_setactivexguid.rb · Exploit
• 🔥 http://exploit-db.com/exploits/17269 · Exploit
• 🔥 http://securityfocus.com/bid/47704 · Exploit
• 🔥 https://exploit-db.com/exploits/17269 · Exploit
• 🔥 http://security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdf · Exploit
• 🔥 https://exploit-db.com/exploits/17240 · Exploit
• 🔥 http://exploit-db.com/exploits/17240 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67267 · Nota
• http://vupen.com/english/advisories/2011/1174 · Aviso do Fabricante
• http://us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2089 · Nota de Segurança
• http://secunia.com/advisories/44417 · Aviso do Fabricante
• http://osvdb.org/72135 · Nota