Pro-face Pro-Server EX WinGP PC Runtime Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: Pro-face Pro-Server EX WinGP PC Runtime http://www.profaceamerica.com/cms/resourcelibrary/products/9e3c2a7965a27592/index.html Versions: ProServr = 1.30.000 PCRuntime = 3.1.00 Platforms: Windows Bug: A Find Node invalid memory access ...

CVE-2012-3793

CVE-2012-3793 affects Pro-face WinGP PC Runtime (3.1.00 and earlier) and Pro-face Pro-Server EX (1.30.000 and earlier). The vulnerability stems from an integer overflow that can cause a buffer overflow when processing a crafted packet with a specific opcode, leading to a denial-of-service (daemon...

CVE-2012-3797: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not properly check packet sizes before reusing packet memory buffers, which allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified...

PT-2012-5007

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue is related to improper checking of packet sizes before reusing packet memory buffers. This allows remote attackers...

PT-2012-5005

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This can be achieved by sending...

CVE-2012-3796: Exposure of Sensitive Information to an Unauthorized Actor

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to obtain sensitive information from daemon memory via a crafted packet with a certain opcode...

CVE-2012-3793: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service daemon crash via a crafted packet with a certain opcode that triggers an incorrect memory allocation and a buffer...

CVE-2012-3794: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service unhandled exception and daemon crash via a crafted packet with a certain opcode that triggers an invalid attempt to allocate a large...

CVE-2012-3792: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service out-of-bounds read operation via a crafted packet that triggers a certain Find Node check attempt...

PT-2012-5002

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to cause a denial of service via a crafted packet, triggering a certain Find Node check...

PT-2012-5004

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in an unhandled exception and daemon crash. This i...

PT-2012-5006

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to obtain sensitive information from daemon memory by sending a crafted packet with a...

PT-2012-5003

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This is achieved by sending a...

CVE-2012-3795: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service daemon crash via a crafted packet with a certain opcode and a large value in a size field...

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities Luigi Auriemma Application: Pro-face Pro-Server EX WinGP PC Runtime http://www.profaceamerica.com/cms/resourcelibrary/products/9e3c2a7965a27592/index.html Versions: ProServr = 1.30.000 PCRuntime = 3.1.00 Platforms: Windows Bug: A...

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities

Luigi Auriemma Application: Pro-face Pro-Server EX WinGP PC Runtime http://www.profaceamerica.com/cms/resourcelibrary/products/9e3c2a7965a27592/index.html Versions: ProServr = 1.30.000 PCRuntime = 3.1.00 Platforms: Windows Bug: A "Find Node" invalid memory access B memset integer overflow C...

Pro-Face Pro-Server EX Vulnerabilities

Overview This advisory is a follow-up to the alert titled “ICS-ALERT-12-137-01 Pro-face Pro-Server EX Vulnerabilities,” that was published May 16, 2012, on the ICS-CERT Web page. Independent researcher Luigi Auriemma identified multiple vulnerabilities in the Pro-face Pro-Server EX application an...