Test Kennung:	1.3.6.1.4.1.25623.1.0.902724
Kategorie:	Buffer overflow
Titel:	WellinTech KingView 'KVWebSvr.dll' ActiveX Control Heap Buffer Overflow Vulnerability
Zusammenfassung:	KingView is prone to a buffer overflow vulnerability.
Beschreibung:	Summary: KingView is prone to a buffer overflow vulnerability. Vulnerability Insight: The flaw exists due to error in 'KVWebSvr.dll' file, when 'ValidateUser' method in an ActiveX component called with a specially crafted argument to cause a stack-based buffer overflow. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. Affected Software/OS: KingView version 6.53 and 6.52 Solution: Upgrade KVWebSrv.dll file version to 65.30.2010.18019. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3142 BugTraq ID: 46757 http://www.securityfocus.com/bid/46757 http://www.exploit-db.com/exploits/16936 http://www.cnvd.org.cn/vulnerability/CNVD-2011-04541 http://www.scadahacker.com/exploits-wellintech-kvwebsvr.html http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-066-01.pdf http://www.us-cert.gov/control_systems/pdf/ICSA-11-074-01.pdf http://www.osvdb.org/72889
Copyright	Copyright (C) 2011 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.