progea movicon / powerhmi <= 11.2.1085 - Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: Progea Movicon / PowerHMI http://www.progea.com Versions: = 11.2.1085 Platforms: Windows Bug: memory corruption Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction ...

CVE-2011-3499

Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location...

CVE-2011-3498

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...

Memory corruption

Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location...

Heap overflow

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...

CVE-2011-3498

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...

CVE-2011-3498

Progea Movicon/PowerHMI is affected by CVE-2011-3498 (and related 11.2.1085 and earlier). The issue is a heap-based buffer overflow triggered by an HTTP request on port 808/TCP with a long content-length, allowing remote attackers to cause denial of service and potentially execute arbitrary code....

CVE-2011-3499

Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location...

CVE-2011-3499

The CVE-2011-3499 vulnerability affects Progea Movicon / PowerHMI 11.2.1085 and earlier. A memory corruption path via an EIDP packet with a large size field allows remote attackers to cause a denial of service and potentially execute arbitrary code by writing a zero byte to an arbitrary memory lo...

CVE-2011-3491

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a negative Content-Length field...

Heap overflow

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a negative Content-Length field...

CVE-2011-3491

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a negative Content-Length field...

CVE-2011-3498: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...

CVE-2011-3499: Improper Restriction of Operations within the Bounds of a Memory Buffer

Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location...

CVE-2011-3491: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a negative Content-Length field...

PT-2011-4472

Name of the Vulnerable Software and Affected Versions Progea Movicon / PowerHMI versions 11.2.1085 and earlier Description A heap-based buffer overflow issue allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a negative Content-Length field...

PT-2011-4480

Name of the Vulnerable Software and Affected Versions Progea Movicon / PowerHMI versions 11.2.1085 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption and crash, and possibly execute arbitrary code. This is achieved by sending an...

PT-2011-4479

Name of the Vulnerable Software and Affected Versions Progea Movicon / PowerHMI versions 11.2.1085 and earlier Description A heap-based buffer overflow issue allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request. Recommendations For Prog...

Progea Movicon / PowerHMI 11.2.1085 Heap Overflow

Luigi Auriemma Application: Progea Movicon / PowerHMI http://www.progea.com Versions: = 11.2.1085 Platforms: Windows Bug: heap overflow Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix =============== ...

progea movicon powerhmi 11.2.1085 - Multiple Vulnerabilities

progea movicon powerhmi 11.2.1085 - Multiple Vulnerabilities Luigi Auriemma Application: Progea Movicon / PowerHMI http://www.progea.com Versions: = 11.2.1085 Platforms: Windows Bug: memory corruption Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web:...