PT-2012-4074 · Ge Intelligent Platforms+1 · Ge Intelligent Platforms Si7 I/O Driver+6

Publicado

2012-07-05

·

Atualizado

2012-07-17

·

CVE-2012-2515

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions KeyHelp.ocx version 1.2.312 EMC Documentum ApplicationXtender Desktop version 5.4 EMC Captiva Quickscan Pro version 4.6 SP1 GE Intelligent Platforms Proficy Historian versions 3.1 through 4.5 GE Intelligent Platforms Proficy HMI/SCADA iFIX versions 5.0 through 5.1 GE Intelligent Platforms Proficy Pulse version 1.0 GE Intelligent Platforms Proficy Batch Execution version 5.6 GE Intelligent Platforms SI7 I/O Driver versions 7.20 through 7.42
Description The issue is related to multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control. This can be exploited by remote attackers to execute arbitrary code via a long string in the second argument to the JumpMappedID or JumpURL method.
Recommendations For KeyHelp.ocx version 1.2.312, consider disabling the JumpMappedID and JumpURL methods until a patch is available. For EMC Documentum ApplicationXtender Desktop version 5.4, restrict access to the affected ActiveX control to minimize the risk of exploitation. For EMC Captiva Quickscan Pro version 4.6 SP1, avoid using the JumpMappedID and JumpURL methods in the affected ActiveX control until the issue is resolved. For GE Intelligent Platforms Proficy Historian versions 3.1 through 4.5, temporarily disable the use of the KeyHelp.ocx ActiveX control. For GE Intelligent Platforms Proficy HMI/SCADA iFIX versions 5.0 through 5.1, consider applying configuration changes to restrict access to the vulnerable component. For GE Intelligent Platforms Proficy Pulse version 1.0, restrict access to the affected module to minimize the risk of exploitation. For GE Intelligent Platforms Proficy Batch Execution version 5.6, avoid using the vulnerable function until the issue is resolved. For GE Intelligent Platforms SI7 I/O Driver versions 7.20 through 7.42, consider disabling the affected ActiveX control until a patch is available.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2012-2515

Produtos afetados

Emc Captiva Quickscan Pro
Emc Documentum Applicationxtender Desktop
Ge Intelligent Platforms Proficy Batch Execution
Ge Intelligent Platforms Proficy Hmi/Scada Ifix
Ge Intelligent Platforms Proficy Historian
Ge Intelligent Platforms Proficy Pulse
Ge Intelligent Platforms Si7 I/O Driver