PT-2013-1697 · Beijer · Beijer Adp+1

Publicado 2013-01-28 · Atualizado 2013-02-08 · CVE-2012-4696

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Beijer ADP versions 6.5.0-180 R1967 through 6.5.1-186 R2942 Beijer H-Designer version 6.5.0 B180 R1967

Description A buffer overflow issue allows local users to gain privileges by inserting a long string into a DLL file.

Recommendations For Beijer ADP versions 6.5.0-180 R1967 through 6.5.1-186 R2942, consider restricting access to the DLL file until a patch is available. For Beijer H-Designer version 6.5.0 B180 R1967, avoid using long strings in the DLL file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-4696

Produtos afetados

Beijer Adp

Beijer H-Designer

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-4696 · Nota de Segurança
• http://securityfocus.com/bid/57546 · Nota
• http://us-cert.gov/control_systems/pdf/ICSA-13-024-01.pdf · Nota