PT-2013-5337 · National Instruments · National Instruments Lookout

Publicado 2013-08-06 · Atualizado 2013-09-18 · CVE-2013-5026

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions National Instruments Lookout versions 6.5 through 6.7

Description The issue allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file through an ActiveX control in certain ocx files.

Recommendations For versions 6.5 through 6.7, consider disabling the ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx to prevent exploitation until a patch is available.

Correção

Identificadores relacionados

CVE-2013-5026

Produtos afetados

National Instruments Lookout

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-5026 · Nota de Segurança
• http://digital.ni.com/public.nsf/websearch/A792DE0703C8108786257B3600506077?OpenDocument · Aviso do Fabricante
• http://digital.ni.com/public.nsf/allkb/544407ECC5FEE44086257BCF00735D1F?OpenDocument · Nota
• http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument · Correção