PT-2012-1793 · Arc Informatique · Frontvue+2

Publicado 2012-04-03 · Atualizado 2012-04-03 · CVE-2011-4043

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ARC Informatique PcVue versions 6.0 through 10.0 ARC Informatique FrontVue (affected versions not specified) ARC Informatique PlantVue (affected versions not specified)

Description The issue is related to an integer overflow in an unspecified ActiveX control in the SVUIGrd.ocx component. This overflow can be triggered by providing a large value for an integer parameter, which leads to a buffer overflow. As a result, remote attackers may be able to execute arbitrary code.

Recommendations For ARC Informatique PcVue versions 6.0 through 10.0, consider disabling the use of the SVUIGrd.ocx component until a patch is available. For ARC Informatique FrontVue and PlantVue, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2011-4043

Produtos afetados

Frontvue

Pcvue

Plantvue

Referências · 5

• 🔥 https://exploit-db.com/exploits/17896 · Exploit
• http://us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf · Nota
• https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440 · Nota
• http://pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-4043 · Nota de Segurança