Stack-based buffer overflow in slssvc.exe prior to 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform software suite, as used in InTouch/Wonderware Application Server IT prior to 10.5 and WAS prior to 3.5, DASABCIP prior to 4.1 SP2, DASSiDirect prior to 3.0, DAServer Runtime Components prior to 3.0 SP2, and other products, allows remote malicious users to cause a denial of service (daemon crash or hang) via a long Unicode string.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
invensys wonderware application server 3.1 |
||
invensys daserver runtime components |
||
invensys dassidirect |
||
invensys wonderware application server 3.0 |
||
invensys dasabcip |
||
invensys wonderware application server |
||
invensys wonderware application server 3.1.201 |
||
invensys wonderware application server 3.0.200 |
||
invensys intouch\\/wonderware application server |
||
invensys dasabcip 4.1 |
||
invensys daserver runtime components 3.0 |
Vulmon