Lucene search

IcscertCVE-2012-2515

HistoryJul 05, 2012 - 3:23 a.m.

CVE-2012-2515

2012-07-0503:23:18

CWE-119

icscert

web.nvd.nist.gov

cve-2012-2515

keyhelp

keyctrl

activex

buffer overflow

emc documentum

emc captiva

ge intelligent platforms

proficy historian

hmi/scada ifix

remote code execution

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.956

Percentile

99.4%

JSON

Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; GE Intelligent Platforms Proficy HMI/SCADA iFIX 5.0 and 5.1; GE Intelligent Platforms Proficy Pulse 1.0; GE Intelligent Platforms Proficy Batch Execution 5.6; GE Intelligent Platforms SI7 I/O Driver 7.20 through 7.42; and other products, allow remote attackers to execute arbitrary code via a long string in the second argument to the (1) JumpMappedID or (2) JumpURL method.

Affected configurations

Nvd

Node

emccaptiva_quickscan_proMatch4.6sp1

emcdocumentum_applicationxtender_desktopMatch5.4

geintelligent_platforms_proficy_batch_executionMatch5.6

geintelligent_platforms_proficy_historianMatch3.1

geintelligent_platforms_proficy_historianMatch3.5

geintelligent_platforms_proficy_historianMatch4.0

geintelligent_platforms_proficy_historianMatch4.5

geintelligent_platforms_proficy_hmi\/scada_ifixMatch5.0

geintelligent_platforms_proficy_hmi\/scada_ifixMatch5.1

geintelligent_platforms_proficy_pulseMatch1.0

geintelligent_platforms_si7_i\/o_driverMatch7.20

geintelligent_platforms_si7_i\/o_driverMatch7.42

VendorProductVersionCPE
emccaptiva_quickscan_pro4.6cpe:2.3:a:emc:captiva_quickscan_pro:4.6:sp1:*:*:*:*:*:*
emcdocumentum_applicationxtender_desktop5.4cpe:2.3:a:emc:documentum_applicationxtender_desktop:5.4:*:*:*:*:*:*:*
geintelligent_platforms_proficy_batch_execution5.6cpe:2.3:a:ge:intelligent_platforms_proficy_batch_execution:5.6:*:*:*:*:*:*:*
geintelligent_platforms_proficy_historian3.1cpe:2.3:a:ge:intelligent_platforms_proficy_historian:3.1:*:*:*:*:*:*:*
geintelligent_platforms_proficy_historian3.5cpe:2.3:a:ge:intelligent_platforms_proficy_historian:3.5:*:*:*:*:*:*:*
geintelligent_platforms_proficy_historian4.0cpe:2.3:a:ge:intelligent_platforms_proficy_historian:4.0:*:*:*:*:*:*:*
geintelligent_platforms_proficy_historian4.5cpe:2.3:a:ge:intelligent_platforms_proficy_historian:4.5:*:*:*:*:*:*:*
geintelligent_platforms_proficy_hmi\/scada_ifix5.0cpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_ifix:5.0:*:*:*:*:*:*:*
geintelligent_platforms_proficy_hmi\/scada_ifix5.1cpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_ifix:5.1:*:*:*:*:*:*:*
geintelligent_platforms_proficy_pulse1.0cpe:2.3:a:ge:intelligent_platforms_proficy_pulse:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
emc	captiva_quickscan_pro	4.6	cpe:2.3:a:emc:captiva_quickscan_pro:4.6:sp1::::::
emc	documentum_applicationxtender_desktop	5.4	cpe:2.3:a:emc:documentum_applicationxtender_desktop:5.4:::::::*
ge	intelligent_platforms_proficy_batch_execution	5.6	cpe:2.3:a:ge:intelligent_platforms_proficy_batch_execution:5.6:::::::*
ge	intelligent_platforms_proficy_historian	3.1	cpe:2.3:a:ge:intelligent_platforms_proficy_historian:3.1:::::::*
ge	intelligent_platforms_proficy_historian	3.5	cpe:2.3:a:ge:intelligent_platforms_proficy_historian:3.5:::::::*
ge	intelligent_platforms_proficy_historian	4.0	cpe:2.3:a:ge:intelligent_platforms_proficy_historian:4.0:::::::*
ge	intelligent_platforms_proficy_historian	4.5	cpe:2.3:a:ge:intelligent_platforms_proficy_historian:4.5:::::::*
ge	intelligent_platforms_proficy_hmi\/scada_ifix	5.0	cpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_ifix:5.0:::::::*
ge	intelligent_platforms_proficy_hmi\/scada_ifix	5.1	cpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_ifix:5.1:::::::*
ge	intelligent_platforms_proficy_pulse	1.0	cpe:2.3:a:ge:intelligent_platforms_proficy_pulse:1.0:::::::*

Rows per page:

1-10 of 121

References

retrogod.altervista.org/9sg_emc_keyhelp.html

secunia.com/advisories/36905

secunia.com/advisories/36914

support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/14000/KB14863/en_US/GEIP12-04%20Security%20Advisory%20-%20Proficy%20HTML%20Help.pdf

www.securityfocus.com/bid/36546

www.us-cert.gov/control_systems/pdf/ICSA-12-131-02.pdf

www.vupen.com/english/advisories/2009/2793

www.vupen.com/english/advisories/2009/2795