CVE-2011-1919: Buffer Overflow
Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted TCP message traffic to (1) PRProficyMgr.exe in Proficy Server Manager, (2) PRGateway.exe in Proficy Server Gateway, (3) PRRDS.exe in Proficy Remote Data Service, or (4) PRLicenseMgr.exe in Proficy Server License Manager.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1919?
CVE-2011-1919 is considered a critical vulnerability due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2011-1919?
To address CVE-2011-1919, upgrade to GE Intelligent Platforms Proficy Applications version 4.4.1 or 5.0 which contain the necessary patches.
What causes CVE-2011-1919?
CVE-2011-1919 is caused by multiple stack-based buffer overflows triggered by malformed TCP message traffic.
Which versions of GE Intelligent Platforms are affected by CVE-2011-1919?
CVE-2011-1919 affects versions 4.0 and below 4.4.1 and all versions before 5.0 of GE Intelligent Platforms Proficy Historian.
Can CVE-2011-1919 be exploited remotely?
Yes, CVE-2011-1919 can be exploited remotely, allowing attackers to crash services or potentially execute code.