CVE-2012-4359 in Winlog Proinformazioni

Riassunto

di MITRE

Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted negative integer after the opcode. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4358.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Prenotare

19/08/2012

Divulgazione

19/08/2012

Moderazione

accettato

CPE

pronto

EPSS

0.01677

KEV

no

Attività

molto basso

Fonti

Want to stay up to date on a daily basis?

Enable the mail alert feature now!