PT-2014-1936 · 1с · 1С:Предприятие
Publicado
2014-04-08
·
Atualizado
2014-04-08
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
1С:Предприятие (affected versions not specified)
Description
The issue concerns the use of the rtrsrvc.dll module by server processes ragent.exe, rmngr.exe, and rhost.exe in the 1С:Предприятие system. A specially crafted TCP packet can cause an initialization error of a class, leading to erroneous memory reading at a null address. This allows a remote attacker to cause a denial of service.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
1С:Предприятие