CVE-2011-4536

WellinTech KingView is affected by a heap-based buffer overflow in HistoryServer.exe (HistorySvr.dll, nettransdll.dll) that can be triggered by parsing op-code 3 packets on TCP port 777, allowing remote code execution. Affected are KingView 6.53 and 65.30.2010.18018. Root cause: heap allocation b...

CVE-2011-4536: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in nettransdll.dll in HistorySvr.exe aka HistoryServer.exe in WellinTech KingView 6.53 and 65.30.2010.18018 allows remote attackers to execute arbitrary code via a crafted op-code 3 packet...

WellinTech KingView buffer overflow

Buffer overflow on TCP/777 request parsing...

PT-2011-4973

Name of the Vulnerable Software and Affected Versions WellinTech KingView versions 6.53 and 65.30.2010.18018 Description The issue is related to a heap-based buffer overflow in the nettransdll.dll component of HistorySvr.exe, also known as HistoryServer.exe, which allows remote attackers to execu...

WellinTech KingView HistoryServer.exe Opcode 3 Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Wellintek KingView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the protocol parsing code inside nettransdll.dll. The parent service is called...

WellinTech Kingview 6.53 Remote Heap Overflow

Overview This advisory is a follow-up to ICS-ALERT-11-011-01 WellinTech Kingview Buffer Overflow, published on the ICS-CERT Web site on January 11, 2011. Independent security researcher Dillon Beresford reported a heap overflow vulnerability in WellinTech KingView V6.53, which may allow a remote,...

WellinTech KingView 'KVWebSvr.dll' ActiveX Control Heap Buffer Overflow Vulnerability

KingView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WellinTech KingView 'KVWebSvr.dll' ActiveX Control Heap Buffer Overflow Vulnerability

This host is installed with KingView and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodkingviewactivexbofvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ WellinTech KingView 'KVWebSvr.dll' ActiveX Control Heap Buffer Overflow Vulnerability Authors: Madhuri D...

CVE-2011-3142

Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote attackers to execute arbitrary code via a long second argument to the ValidateUser method...

CVE-2011-3142

CVE-2011-3142 affects WellinTech KingView KVWebSvr.dll ActiveX control in versions 6.52/6.53. The vulnerability is a stack-based buffer overflow triggered by a long second argument to the ValidateUser method, enabling remote code execution. Public exploit code exists (ICS-CERT/ISA advisories refe...

PT-2011-4271

Name of the Vulnerable Software and Affected Versions WellinTech KingView versions 6.52 through 6.53 Description The issue is related to a stack-based buffer overflow in an ActiveX control in KVWebSvr.dll. This allows remote attackers to execute arbitrary code via a long second argument to the...

CVE-2011-3142: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote attackers to execute arbitrary code via a long second argument to the ValidateUser method...

Heap overflow

Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777...

CVE-2011-0406

CVE-2011-0406 concerns a remote heap overflow in WellinTech KingView 6.53’s HistorySvr.exe. A specially crafted request to port 777 can cause heap corruption, allowing a remote attacker to execute arbitrary code or crash the service. Public references note exploitation code exists and a patch was...

CVE-2011-0406: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777...

PT-2011-2327

Name of the Vulnerable Software and Affected Versions WellinTech KingView version 6.53 Description A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a long request to TCP port 777. Recommendations For WellinTech KingView version 6.53, at the moment...