CVE Database
/

CVE-2011-1567

Back to search

CVE-2011-1567

Published: Apr 5, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted (1) ListAll, (2) Write File, (3) ReadFile, (4) Delete, (5) RenameFile, and (6) FileInfo commands in an 0xd opcode; (7) the Add, (8) ReadFile, (9) Write File, (10) Rename, (11) Delete, and (12) Add commands in an RMS report templates (0x7) opcode; and (13) 0x4 command in an STDREP request (0x8) opcode to TCP port 12401.

VendorProductVersions

n/a

n/a

affected
n/a

References

46936
vdb-entry
x_refsource_BID
43849
third-party-advisory
x_refsource_SECUNIA
ADV-2011-0741
vdb-entry
x_refsource_VUPEN
17024
exploit
x_refsource_EXPLOIT-DB
8179
third-party-advisory
x_refsource_SREASON
8251
third-party-advisory
x_refsource_SREASON

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now