PT-2012-1790 · Invensys+1 · Invensys Wonderware Hmi Reports+1

Publicado 2012-02-10 · Atualizado 2012-02-14 · CVE-2011-4039

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Invensys Wonderware HMI Reports versions 3.42.835.0304 and earlier Ocean Data Systems Dream Report versions prior to 4.0

Description The issue allows user-assisted remote attackers to execute arbitrary code via a malformed file, triggering a "write access violation."

Recommendations For Invensys Wonderware HMI Reports versions 3.42.835.0304 and earlier, update to a version later than 3.42.835.0304 to resolve the issue. For Ocean Data Systems Dream Report versions prior to 4.0, update to version 4.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-4039

Produtos afetados

Dream Report

Invensys Wonderware Hmi Reports

Referências · 5

• http://secunia.com/advisories/47742 · Aviso do Fabricante
• http://us-cert.gov/control_systems/pdf/ICSA-12-039-01.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-4039 · Nota de Segurança
• http://secunia.com/advisories/47933 · Aviso do Fabricante
• http://us-cert.gov/control_systems/pdf/ICSA-12-024-01.pdf · Nota