Advantech WebAccess 7.2 < 7.2-2014.07.30 Multiple ActiveX RCE

Binary data 9959.prm...

Advantech WebAccess 7.2 < 7.2-2014.07.30 Multiple ActiveX RCE

Binary data scadaadvantechwebaccess7220140730.nbin...

CVE-2014-0991

Advantech WebAccess 7.2 is affected by a stack-based buffer overflow in the webvact.ocx ActiveX control (projectname parameter) that could allow remote code execution. CoreLabs CORE-2014-0005 documents this family of vulnerabilities and notes a vendor fix via an update (WebAccess 7.2, 2014.07.30 ...