ID de Prueba:	1.3.6.1.4.1.25623.1.0.902724
Categoría:	Buffer overflow
Título:	WellinTech KingView 'KVWebSvr.dll' ActiveX Control Heap Buffer Overflow Vulnerability
Resumen:	KingView is prone to a buffer overflow vulnerability.
Descripción:	Summary: KingView is prone to a buffer overflow vulnerability. Vulnerability Insight: The flaw exists due to error in 'KVWebSvr.dll' file, when 'ValidateUser' method in an ActiveX component called with a specially crafted argument to cause a stack-based buffer overflow. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. Affected Software/OS: KingView version 6.53 and 6.52 Solution: Upgrade KVWebSrv.dll file version to 65.30.2010.18019. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3142 BugTraq ID: 46757 http://www.securityfocus.com/bid/46757 http://www.exploit-db.com/exploits/16936 http://www.cnvd.org.cn/vulnerability/CNVD-2011-04541 http://www.scadahacker.com/exploits-wellintech-kvwebsvr.html http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-066-01.pdf http://www.us-cert.gov/control_systems/pdf/ICSA-11-074-01.pdf http://www.osvdb.org/72889
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.