PT-2014-1937 · 1с · 1С:Предприятие
Publicado
2014-04-09
·
Atualizado
2014-04-09
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
1С:Предприятие (affected versions not specified)
Description
The issue concerns the server processes ragent.exe, rmngr.exe, rhost.exe of the 1С:Предприятие automation system, which use the same core82.dll module. A specially crafted TCP packet can be interpreted as a sequence of recursive function calls, leading to application stack exhaustion. This allows a remote attacker to cause a denial of service.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Uncontrolled Recursion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
1С:Предприятие