PT-2014-1937 · 1с · 1С:Предприятие
Published
2014-04-09
·
Updated
2014-04-09
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
1С:Предприятие (affected versions not specified)
Description
The issue concerns the server processes ragent.exe, rmngr.exe, rhost.exe of the 1С:Предприятие automation system, which use the same core82.dll module. A specially crafted TCP packet can be interpreted as a sequence of recursive function calls, leading to application stack exhaustion. This allows a remote attacker to cause a denial of service.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Uncontrolled Recursion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
1С:Предприятие