PT-2012-1984 · Atvise · Atvise Webmi2Ads

Published 2012-04-13 · Updated 2012-04-13 · CVE-2011-4881

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions atvise webMI2ADS (aka webMI) versions prior to 2.0.2

Description The issue is related to the web server in atvise webMI2ADS not properly checking return values from functions. This allows remote attackers to cause a denial of service via a crafted HTTP request, resulting in a NULL pointer dereference.

Recommendations For versions prior to 2.0.2, update to version 2.0.2 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2011-4881

Affected Products

Atvise Webmi2Ads

References · 4

• 🔥 https://exploit-db.com/exploits/17963 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-4881 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4881 · Note
• http://us-cert.gov/control_systems/pdf/ICSA-12-102-01.pdf · Note