Test ID:	1.3.6.1.4.1.25623.1.0.902724
Category:	Buffer overflow
Title:	WellinTech KingView 'KVWebSvr.dll' ActiveX Control Heap Buffer Overflow Vulnerability
Summary:	KingView is prone to a buffer overflow vulnerability.
Description:	Summary: KingView is prone to a buffer overflow vulnerability. Vulnerability Insight: The flaw exists due to error in 'KVWebSvr.dll' file, when 'ValidateUser' method in an ActiveX component called with a specially crafted argument to cause a stack-based buffer overflow. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. Affected Software/OS: KingView version 6.53 and 6.52 Solution: Upgrade KVWebSrv.dll file version to 65.30.2010.18019. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3142 BugTraq ID: 46757 http://www.securityfocus.com/bid/46757 http://www.exploit-db.com/exploits/16936 http://www.cnvd.org.cn/vulnerability/CNVD-2011-04541 http://www.scadahacker.com/exploits-wellintech-kvwebsvr.html http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-066-01.pdf http://www.us-cert.gov/control_systems/pdf/ICSA-11-074-01.pdf http://www.osvdb.org/72889
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.