Unitronics UniDownloader and VisiLogic OPLC IDE IPWorksSSL.HTTPS Memory Corruption (CVE-2015-7905)

A memory corruption vulnerability exists in Unitronics, VisiLogic OPLC IDE and UniDownloader. The vulnerability is due to untrusted pointer dereference on the SSLCertHandle parameter of the IPWorksSSL.HTTPS ActiveX control. A remote attacker could exploit this vulnerability by enticing a vulnerab...

CVE-2015-7905

Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors...

CVE-2015-7905

CVE-2015-7905 affects Unitronics VisiLogic OPLC IDE and UniDownloader via the IPWorksSSL.HTTPS ActiveX controls. A memory/pointer handling flaw exists in the SSLCertHandle (HTTPS) and related properties (WinSockPath, PostDataB/FirewallDataB) that can lead to remote code execution when a user open...