PT-2011-4973 · Wellintech · Kingview

Luigi Auriemma · Publicado 2011-12-22 · Atualizado 2011-12-27 · CVE-2011-4536

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WellinTech KingView versions 6.53 and 65.30.2010.18018

Description The issue is related to a heap-based buffer overflow in the nettransdll.dll component of HistorySvr.exe, also known as HistoryServer.exe, which allows remote attackers to execute arbitrary code. This can be achieved by sending a crafted op-code 3 packet.

Recommendations For WellinTech KingView version 6.53, update to a version that fixes the heap-based buffer overflow issue. For WellinTech KingView version 65.30.2010.18018, update to a version that fixes the heap-based buffer overflow issue. As a temporary workaround, consider restricting access to the nettransdll.dll component until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-4536

ZDI-11-351

Produtos afetados

Kingview

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2011-4536 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-11-351 · Nota
• http://secunia.com/advisories/47339 · Aviso do Fabricante
• http://osvdb.org/77992 · Nota
• http://kingview.com/news/detail.aspx?contentid=587 · Aviso do Fabricante
• http://en.wellintech.com/news/detail.aspx?contentid=166 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-11-351 · Nota de Segurança
• http://us-cert.gov/control_systems/pdf/ICSA-11-355-02.pdf · Correção