Schneider Electric Pelco DS-NVs Rvctl.RVControl Buffer Overflow (CVE-2015-0982)

A buffer overflow vulnerability exists in Schneider Electric Pelco DS-NV Software package. The vulnerability is due to insufficient input validation on a user-supplied input in the SetText method before it is copied into a fixed length buffer on stack. A remote unauthenticated attacker can exploi...

CVE-2015-0982

The CVE-2015-0982 issue affects Schneider Electric Pelco DS-NVs software. The root cause is a stack-based buffer overflow in the rvctl.dll ActiveX control (RVControl.1) SetText path, allowing remote attackers to trigger arbitrary code execution when a user opens a malicious file or visits a craft...