CVE-2010-4597

Опубликовано: 23 дек. 2010

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Interface (HMI) before 3.5.3900.10 allows remote attackers to execute arbitrary code via a long string in the second argument.

Ссылки

http://secunia.com/advisories/42650
http://www.exploit-db.com/exploits/15767
Exploit
http://www.integraxor.com/blog/integraxor-3-5-scada-security-issue-20101006-0109-vulnerability-note
Vendor Advisory
http://www.kb.cert.org/vuls/id/603928
US Government Resource
http://www.securityfocus.com/bid/45487
Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-10-322-01.pdf
Patch
http://www.vupen.com/english/advisories/2010/3275
Vendor Advisory
http://secunia.com/advisories/42650
http://www.exploit-db.com/exploits/15767
Exploit
http://www.integraxor.com/blog/integraxor-3-5-scada-security-issue-20101006-0109-vulnerability-note
Vendor Advisory
http://www.kb.cert.org/vuls/id/603928
US Government Resource
http://www.securityfocus.com/bid/45487
Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-10-322-01.pdf
Patch
http://www.vupen.com/english/advisories/2010/3275
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ecava:integraxor:*:*:*:*:*:*:*:*

Версия до 3.5.3900.5 (включая)

EPSS

Процентиль: 97%

0.36582

Средний

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-2hr6-998x-mj94

github

больше 3 лет назад