progea movicon / powerhmi <= 11.2.1085 - Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: Progea Movicon / PowerHMI http://www.progea.com Versions: = 11.2.1085 Platforms: Windows Bug: memory corruption Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction ...

CVE-2011-3499

Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location...

CVE-2011-3498

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...

Memory corruption

Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location...

Heap overflow

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...

CVE-2011-3498

Progea Movicon/PowerHMI is affected by CVE-2011-3498 (and related 11.2.1085 and earlier). The issue is a heap-based buffer overflow triggered by an HTTP request on port 808/TCP with a long content-length, allowing remote attackers to cause denial of service and potentially execute arbitrary code....

CVE-2011-3499

The CVE-2011-3499 vulnerability affects Progea Movicon / PowerHMI 11.2.1085 and earlier. A memory corruption path via an EIDP packet with a large size field allows remote attackers to cause a denial of service and potentially execute arbitrary code by writing a zero byte to an arbitrary memory lo...

CVE-2011-3498

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...

CVE-2011-3499

Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location...

CVE-2011-3491

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a negative Content-Length field...

Heap overflow

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a negative Content-Length field...

CVE-2011-3491

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a negative Content-Length field...

progea movicon powerhmi 11.2.1085 - Multiple Vulnerabilities

progea movicon powerhmi 11.2.1085 - Multiple Vulnerabilities Luigi Auriemma Application: Progea Movicon / PowerHMI http://www.progea.com Versions: = 11.2.1085 Platforms: Windows Bug: memory corruption Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web:...

Progea Movicon / PowerHMI 11.2.1085 Heap Overflow

Luigi Auriemma Application: Progea Movicon / PowerHMI http://www.progea.com Versions: = 11.2.1085 Platforms: Windows Bug: heap overflow Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix =============== ...

progea movicon / powerhmi 11.2.1085 - Multiple Vulnerabilities

Luigi Auriemma Application: Progea Movicon / PowerHMI http://www.progea.com Versions: = 11.2.1085 Platforms: Windows Bug: memory corruption Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...