Published: 19/04/2013 Updated: 15/05/2013

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities 7.10 and CitectScada 7.10r1, allow remote malicious users to execute arbitrary code via a long string, as demonstrated by a long WzTitle property value to a certain ActiveX control.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mitsubishi-automation mitsubishi mx component 3
schneider-electric citectfacilities 7.10
schneider-electric citectscada 7.10

<!-- Title: Mitsubishi MX Component v3 ActiveX 365+-Day [ActUWzddll (WzTitle)] By: Dr_IDE File: C:\MELSEC\Act\Control\ActUWzddll (Version 1001) Known Affected Systems: CitectScada 710r1 ships with this in the "Extras" folder Known Affected Systems: CitectFacilities 710 ships with this in the "Extras" folder I am unsure as to what other ...

CWE-119 http://www.exploit-db.com/exploits/24886/https://nvd.nist.gov https://www.exploit-db.com/exploits/24886/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-3075

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect