Published: 16/09/2011 Updated: 29/08/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and previous versions allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a negative Content-Length field.

Vulnerable Product	Search on Vulmon	Subscribe to Product
progea movicon powerhmi 11.0.1017
progea movicon powerhmi 11
progea movicon powerhmi

####################################################################### Luigi Auriemma Application: Progea Movicon / PowerHMI wwwprogeacom Versions: <= 1121085 Platforms: Windows Bug: memory corruption Exploitation: remote Date: 13 Sep 2011 Author: Luigi Aurie ...

CWE-119 http://aluigi.altervista.org/adv/movicon_1-adv.txt http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf http://osvdb.org/75494 https://exchange.xforce.ibmcloud.com/vulnerabilities/69787 https://nvd.nist.gov https://www.exploit-db.com/exploits/17842/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-3491

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect