SCADA: Kingview SCADA HMI HistorySvr Heap Overflow

This signature detects attempts to exploit a known flaw in KingView SCADA HMI HistorySrv. Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts will likely result in denial-of-service conditions. KingView 6.53 is vulnerable; other versions might also be affected.

Extended Description

KingView is prone to a heap-based buffer-overflow vulnerability because it fails to properly validate user-supplied input. Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts will likely result in denial-of-service conditions. KingView 6.53 is vulnerable; other versions may also be affected.

References

BugTraq: 45727

CVE: CVE-2011-0406

URL: http://www.kingview.com/news/detail.aspx?contentid=528

Short Name

SCADA:KINGVIEW-HISTORYSVR-OF

Severity

Major

Recommended

False

Recommended Action

Drop

SCADA: Kingview SCADA HMI HistorySvr Heap Overflow

Extended Description

References

Found a potential security threat?