PT-2013-1697 · Beijer · Beijer Adp+1

Published 2013-01-28 · Updated 2013-02-08 · CVE-2012-4696

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Beijer ADP versions 6.5.0-180 R1967 through 6.5.1-186 R2942 Beijer H-Designer version 6.5.0 B180 R1967

Description A buffer overflow issue allows local users to gain privileges by inserting a long string into a DLL file.

Recommendations For Beijer ADP versions 6.5.0-180 R1967 through 6.5.1-186 R2942, consider restricting access to the DLL file until a patch is available. For Beijer H-Designer version 6.5.0 B180 R1967, avoid using long strings in the DLL file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-4696

Affected Products

Beijer Adp

Beijer H-Designer

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-4696 · Security Note
• http://securityfocus.com/bid/57546 · Note
• http://us-cert.gov/control_systems/pdf/ICSA-13-024-01.pdf · Note