PT-2013-5337 · National Instruments · National Instruments Lookout

Published 2013-08-06 · Updated 2013-09-18 · CVE-2013-5026

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions National Instruments Lookout versions 6.5 through 6.7

Description The issue allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file through an ActiveX control in certain ocx files.

Recommendations For versions 6.5 through 6.7, consider disabling the ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx to prevent exploitation until a patch is available.

Fix

Related Identifiers

CVE-2013-5026

Affected Products

National Instruments Lookout

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-5026 · Security Note
• http://digital.ni.com/public.nsf/websearch/A792DE0703C8108786257B3600506077?OpenDocument · Vendor Advisory
• http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument · Patch
• http://digital.ni.com/public.nsf/allkb/544407ECC5FEE44086257BCF00735D1F?OpenDocument · Note