WellinTech KingView 6.53 < 2010-12-15 HistorySvr.exe TCP Request Remote Overflow

Binary data scadakingview6532010-12-15.nbin...

CVE-2011-4536

WellinTech KingView is affected by a heap-based buffer overflow in HistoryServer.exe (HistorySvr.dll, nettransdll.dll) that can be triggered by parsing op-code 3 packets on TCP port 777, allowing remote code execution. Affected are KingView 6.53 and 65.30.2010.18018. Root cause: heap allocation b...

CVE-2011-4536

Heap-based buffer overflow in nettransdll.dll in HistorySvr.exe aka HistoryServer.exe in WellinTech KingView 6.53 and 65.30.2010.18018 allows remote attackers to execute arbitrary code via a crafted op-code 3 packet...

CVE-2011-4536: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in nettransdll.dll in HistorySvr.exe aka HistoryServer.exe in WellinTech KingView 6.53 and 65.30.2010.18018 allows remote attackers to execute arbitrary code via a crafted op-code 3 packet...

CVE-2011-0406

Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777...

Heap overflow

Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777...

CVE-2011-0406

Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777...

CVE-2011-0406

CVE-2011-0406 concerns a remote heap overflow in WellinTech KingView 6.53’s HistorySvr.exe. A specially crafted request to port 777 can cause heap corruption, allowing a remote attacker to execute arbitrary code or crash the service. Public references note exploitation code exists and a patch was...

CVE-2011-0406: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777...