Unitronics VisiLogic OPLC IDE vlp File Parsing Stack Buffer Overflow Vulnerability

OVERVIEW ZDI has identified a buffer overflow vulnerability discovered by Steven Seeley of Source Incite in Unitronics VisiLogic. Unitronics has produced a new version to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Unitronics reports that the...

CVE-2016-4519

Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a ZIP archive in a vlp file...

CVE-2016-4519

CVE-2016-4519 affects Unitronics VisiLogic OPLC IDE (pre-9.8.30) via a stack-based buffer overflow in parsing the vlp/ZIP filename field. The root cause is copying into a fixed-length stack buffer without validating the filename length, enabling remote code execution. Exploitation details indicat...

CVE-2016-4519

Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a ZIP archive in a vlp file...