PT-2011-3580 · Iconics · Genesis32+1

Blair Strang + 1 · Published 2011-05-13 · Updated 2017-08-29 · CVE-2011-2089

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GenVersion.dll version 8.0.138.0 in ICONICS BizViz versions prior to 9.22 GenVersion.dll version 8.0.138.0 in GENESIS32 versions prior to 9.22

Description The issue is related to a stack-based buffer overflow in the SetActiveXGUID method within the VersionInfo ActiveX control. This can be exploited by remote attackers to execute arbitrary code by providing a long string in the argument.

Recommendations For ICONICS BizViz versions prior to 9.22, update to version 9.22 or later. For GENESIS32 versions prior to 9.22, update to version 9.22 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-2089

Affected Products

Genesis32

Iconics Bizviz

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/iconics_webhmi_setactivexguid.rb · Exploit
• 🔥 http://exploit-db.com/exploits/17269 · Exploit
• 🔥 http://securityfocus.com/bid/47704 · Exploit
• 🔥 https://exploit-db.com/exploits/17269 · Exploit
• 🔥 http://security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdf · Exploit
• 🔥 https://exploit-db.com/exploits/17240 · Exploit
• 🔥 http://exploit-db.com/exploits/17240 · Exploit
• http://vupen.com/english/advisories/2011/1174 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2089 · Security Note
• http://secunia.com/advisories/44417 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67267 · Note
• http://us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdf · Note
• http://osvdb.org/72135 · Note