PT-2014-1936 · 1с · 1С:Предприятие
Published
2014-04-08
·
Updated
2014-04-08
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
1С:Предприятие (affected versions not specified)
Description
The issue concerns the use of the rtrsrvc.dll module by server processes ragent.exe, rmngr.exe, and rhost.exe in the 1С:Предприятие system. A specially crafted TCP packet can cause an initialization error of a class, leading to erroneous memory reading at a null address. This allows a remote attacker to cause a denial of service.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
1С:Предприятие