PT-2011-4973 · Wellintech · Kingview

Luigi Auriemma · Published 2011-12-22 · Updated 2011-12-27 · CVE-2011-4536

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WellinTech KingView versions 6.53 and 65.30.2010.18018

Description The issue is related to a heap-based buffer overflow in the nettransdll.dll component of HistorySvr.exe, also known as HistoryServer.exe, which allows remote attackers to execute arbitrary code. This can be achieved by sending a crafted op-code 3 packet.

Recommendations For WellinTech KingView version 6.53, update to a version that fixes the heap-based buffer overflow issue. For WellinTech KingView version 65.30.2010.18018, update to a version that fixes the heap-based buffer overflow issue. As a temporary workaround, consider restricting access to the nettransdll.dll component until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-4536

ZDI-11-351

Affected Products

Kingview

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2011-4536 · Security Note
• http://secunia.com/advisories/47339 · Vendor Advisory
• http://kingview.com/news/detail.aspx?contentid=587 · Vendor Advisory
• http://en.wellintech.com/news/detail.aspx?contentid=166 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-11-351 · Security Note
• http://us-cert.gov/control_systems/pdf/ICSA-11-355-02.pdf · Patch
• http://zerodayinitiative.com/advisories/ZDI-11-351 · Note
• http://osvdb.org/77992 · Note