Unitronics VisiLogic OPLC IDE TeePreviewer ChartLink Memory Corruption (CVE-2015-6478)

A memory corruption vulnerability has been reported in Unitronics VisiLogic OPLC IDE. The vulnerability is due to a flaw in the TeePreviewer object in TeeChart5.ocx, in which a user-supplied integer is interpreted as a memory address. A remote, unauthenticated attacker could exploit this...

Unitronics VisiLogic OPLC TeeChart ActiveX RemoveSeries Out of Bounds Array Indexing (CVE-2015-6478)

An out of bounds array indexing vulnerability exists in Unitronics VisiLogic OPLC. The vulnerability is due to use of user supplied value to calculate array index in the RemoveSeries method of the TeeChart.TChart ActiveX control. A remote attacker could exploit this vulnerability by enticing a...

Unitronics VisiLogic OPLC TeeCommander ChartLink ActiveX Control Memory Corruption (CVE-2015-6478)

A memory corruption vulnerability exists in Unitronics VisiLogic OPLC. The vulnerability is due to untrusted pointer dereference on the ChartLink parameter of the TeeChart.TeeCommander ActiveX control. A remote attacker could exploit this vulnerability by enticing a vulnerable user to open a...

CVE-2015-6478

Summary (CVE-2015-6478) : This vulnerability affects Unitronics VisiLogic OPLC IDE (prior to 9.8.02/9.8.0.0 and earlier in some advisories) where ActiveX controls (TeeChart5.ocx, TeePreviewer, TeeCommander, TeeGrid, etc.) are not properly restricted. A remote attacker can lure a user to a crafted...