CVE-2011-1564

Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 Build 6.1.10.10 and earlier allow remote attackers to execute arbitrary code via crafted 1 OnFCMISCFCSMSGBROADCAST and 2 OnFCMISCFCSMSGSEND packets, which trigger a heap-based buffer overflow...

Integer overflow

Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 Build 6.1.10.10 and earlier allow remote attackers to execute arbitrary code via crafted 1 OnFCMISCFCSMSGBROADCAST and 2 OnFCMISCFCSMSGSEND packets, which trigger a heap-based buffer overflow...

CVE-2011-1564

CVE-2011-1564 affects the DATAC RealFlex RealWin 2.1 HMI application (build 6.1.10.10 and earlier). The advisory states multiple integer overflows in the HMI handling of packets On_FC_MISC_FCS_MSGBROADCAST and On_FC_MISC_FCS_MSGSEND, triggering a heap-based buffer overflow. This is described as a...

PT-2011-3220

Name of the Vulnerable Software and Affected Versions DATAC RealFlex RealWin versions 2.1 Build 6.1.10.10 and earlier Description The issue is related to multiple stack-based buffer overflows in the HMI application. Remote attackers can execute arbitrary code via a long username in an "On FC...

CVE-2011-1563: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 Build 6.1.10.10 and earlier allow remote attackers to execute arbitrary code via 1 a long username in an OnFCCONNECTFCSLOGIN packet, and crafted 2 OnFCCTAGLISTFCSCADDTAG, 3 OnFCCTAGLISTFCSCDELTAG, 4...

PT-2011-3221

Name of the Vulnerable Software and Affected Versions DATAC RealFlex RealWin versions 2.1 Build 6.1.10.10 and earlier Description The issue is related to multiple integer overflows in the HMI application. Remote attackers can execute arbitrary code via crafted packets, specifically 1 On FC MISC F...

CVE-2011-1564: Undefined Security Weakness

Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 Build 6.1.10.10 and earlier allow remote attackers to execute arbitrary code via crafted 1 OnFCMISCFCSMSGBROADCAST and 2 OnFCMISCFCSMSGSEND packets, which trigger a heap-based buffer overflow...