ID de Prueba:	1.3.6.1.4.1.25623.1.0.801252
Categoría:	Buffer overflow
Título:	SigPlus Pro ActiveX Control 'LCDWriteString()' Buffer Overflow Vulnerability
Resumen:	SigPlus Pro ActiveX Control is prone to a buffer overflow vulnerability.
Descripción:	Summary: SigPlus Pro ActiveX Control is prone to a buffer overflow vulnerability. Vulnerability Insight: The flaw is due to a boundary error in SigPlus.ocx when handling the 'HexString' argument passed to the 'LCDWriteString()' method and can be exploited to cause a stack-based buffer overflow via an overly long string. Vulnerability Impact: Successful exploitation could allow remote attackers to execute arbitrary code on the system or cause the victim's browser to crash. Affected Software/OS: SigPlus Pro ActiveX control version 3.74. Solution: Upgrade to SigPlus Pro ActiveX control version 3.95 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2931 http://www.exploit-db.com/exploits/14514 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11304 http://secunia.com/advisories/40818 XForce ISS Database: sigplus-activex-bo(60839) https://exchange.xforce.ibmcloud.com/vulnerabilities/60839
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.