ZDI-12-133 : GE Proficy Historian ihDataArchiver.exe Multiple Opcode Parsing Remote Code Execution Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-133 : GE Proficy Historian ihDataArchiver.exe Multiple Opcode Parsing Remote Code Execution Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-12-133 August 3, 2012 - -- CVE ID: CVE-2012-0229 - -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A...

CVE-2012-0229

The CVE-2012-0229 vulnerability affects GE Intelligent Platforms Proficy Historian: ihDataArchiver (ihDataArchiver.exe / ihDataArchiver_x64.exe) in Proficy Historian 4.5 and earlier. A memory corruption flaw exists in the Data Archiver service that processes network traffic on TCP port 14000, all...