CVE-2011-2089

Опубликовано: 13 мая 2011

Источник: nvd

CVSS2: 9.3

EPSS Высокий

Описание

Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in the argument. NOTE: some of these details are obtained from third party information.

Ссылки

http://secunia.com/advisories/44417
Vendor Advisory
http://www.exploit-db.com/exploits/17240
Exploit
http://www.exploit-db.com/exploits/17269
Exploit
http://www.osvdb.org/72135
http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdf
Exploit
http://www.securityfocus.com/bid/47704
Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdf
US Government Resource
http://www.vupen.com/english/advisories/2011/1174
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/67267
http://secunia.com/advisories/44417
Vendor Advisory
http://www.exploit-db.com/exploits/17240
Exploit
http://www.exploit-db.com/exploits/17269
Exploit
http://www.osvdb.org/72135
http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdf
Exploit
http://www.securityfocus.com/bid/47704
Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdf
US Government Resource
http://www.vupen.com/english/advisories/2011/1174
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/67267

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:iconics:bizviz:9.0:*:*:*:*:*:*:*

cpe:2.3:a:iconics:bizviz:9.01:*:*:*:*:*:*:*

cpe:2.3:a:iconics:bizviz:9.1:*:*:*:*:*:*:*

cpe:2.3:a:iconics:bizviz:9.2:*:*:*:*:*:*:*

cpe:2.3:a:iconics:bizviz:9.13:*:*:*:*:*:*:*

cpe:2.3:a:iconics:bizviz:9.20:*:*:*:*:*:*:*

cpe:2.3:a:iconics:bizviz:9.21:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:iconics:genesis32:9.0:*:*:*:*:*:*:*

cpe:2.3:a:iconics:genesis32:9.1:*:*:*:*:*:*:*

cpe:2.3:a:iconics:genesis32:9.01:*:*:*:*:*:*:*

cpe:2.3:a:iconics:genesis32:9.2:*:*:*:*:*:*:*

cpe:2.3:a:iconics:genesis32:9.13:*:*:*:*:*:*:*

cpe:2.3:a:iconics:genesis32:9.20:*:*:*:*:*:*:*

cpe:2.3:a:iconics:genesis32:9.21:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.74625

Высокий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-v47w-64g8-ggfh

github

больше 3 лет назад