Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 02/04/2012 Updated: 26/03/2013

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and previous versions, Foxboro Control Software 3.1 and previous versions, InFusion CE/FE/SCADA 2.5 and previous versions, Wonderware Information Server 4.5 and previous versions, ArchestrA Application Object Toolkit 3.2 and previous versions, and InTouch 10.0 up to and including 10.5 might allow remote malicious users to execute arbitrary code via a long string to the AddFile member.

Vulnerable Product	Search on Vulmon	Subscribe to Product
invensys foxboro control software
invensys infusion control edition
invensys wonderware application server
invensys infusion foundation edition
invensys infusion scada
invensys wonderware information server 4.0
invensys wonderware information server 3.1
invensys intouch 10.5
invensys wonderware information server
invensys archestra application object toolkit
invensys intouch 10.0

CWE-119 http://www.us-cert.gov/control_systems/pdf/ICSA-12-081-01.pdf https://wdnresource.wonderware.com/support/docs/_SecurityBulletins/Security_Bulletin_LFSEC00000071.pdf http://secunia.com/advisories/48675 http://osvdb.org/80891 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2012-0258

Vulnerability Summary

References

Vulmon Search

About

Products

Connect