Advantech WebAccess dvs.ocx GetColor Buffer Overflow Exploit

This Metasploit module exploits a buffer overflow vulnerability in Advantec WebAccess. The vulnerability exists in the dvs.ocx ActiveX control, where a dangerous call to sprintf can be reached with user controlled data through the GetColor function. This Metasploit module has been tested...

CVE-2014-2364

creationtimestamp| type| source ---|---|--- 2014-09-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34757 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/advantechwebaccessdvsgetcolor.rb 2025-02-06...

Advantech WebAccess < 7.2-2014.06.06 Multiple Vulnerabilities

Binary data scadaadvantechwebaccess72.nbin...