EUVD-2016-5506

Malware in sbrugna...

CVE-2016-4519: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a ZIP archive in a vlp file...

PT-2016-5997

Name of the Vulnerable Software and Affected Versions Unitronics VisiLogic OPLC IDE versions prior to 9.8.30 Description The issue is related to a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by crafting a filename field in a ZIP archive...

CVE-2015-7939: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename...

PT-2016-3841

Name of the Vulnerable Software and Affected Versions Unitronics VisiLogic OPLC IDE versions prior to 9.8.09 Description The issue is related to a heap-based buffer overflow that can be triggered by a long vlp filename, allowing remote attackers to execute arbitrary code. This is a remote code...

Unitronics VisiLogic OPLC IDE TChart.ITChart ActiveX Control RemoveSeries Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Unitronics VisiLogic OPLC IDE. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

PT-2015-7663

Name of the Vulnerable Software and Affected Versions Unitronics VisiLogic OPLC IDE versions prior to 9.8.02 Unitronics UniDownloader affected versions not specified Description The issue allows remote attackers to execute unspecified code. It involves the IPWorksSSL.HTTPS.1 ActiveX Control, wher...

PT-2015-7265

Name of the Vulnerable Software and Affected Versions Unitronics VisiLogic OPLC IDE versions prior to 9.8.02 Description The issue allows remote attackers to have an unspecified impact via a crafted web site due to improper restriction of access to ActiveX controls. Multiple ActiveX controls are...

CVE-2015-7905: Improper Control of Generation of Code

Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors...

CVE-2015-6478: Improper Access Control

Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site...