10

CVE-2011-1568

Exploit
Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated using the RMS Reports Delete command, related to the logging of messages to GSST.LOG.  NOTE: some of these details are obtained from third party information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
7t ≫ Igss
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 19.38% 0.97
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-134 Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

http://secunia.com/advisories/43849
Vendor Advisory
http://www.exploit-db.com/exploits/17024
Exploit
http://www.securityfocus.com/bid/46936
Exploit
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf
US Government Resource
http://www.vupen.com/english/advisories/2011/0741
Vendor Advisory
http://aluigi.org/adv/igss_6-adv.txt
Exploit
http://securityreason.com/securityalert/8182