CVE-2011-2957

Rockwell Automation FactoryTalk Diagnostics Viewer before version 2.30.00 (CPR9 SR3) is affected by a memory‑corruption vulnerability triggered by a crafted .ftd configuration file. The issue allows local users to execute arbitrary code when the vulnerable viewer processes the crafted file; it is...

Rockwell FactoryTalk Diag Viewer Memory Corruption

Overview Independent security researchers Billy Rios and Terry McCorkle have coordinated with ICS-CERT on a memory corruption vulnerability that affects Rockwell’s Automation FactoryTalk Diagnostics Viewer product. By using a specially crafted FactoryTalk Diagnostics Viewer configuration file, an...