CVE-2012-3007: Buffer Overflow
First published: Thu Jul 05 2012(Updated: )
Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform software suite, as used in InTouch/Wonderware Application Server IT before 10.5 and WAS before 3.5, DASABCIP before 4.1 SP2, DASSiDirect before 3.0, DAServer Runtime Components before 3.0 SP2, and other products, allows remote attackers to cause a denial of service (daemon crash or hang) via a long Unicode string.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Invensys Dasabcip | <=4.1 | |
| Invensys Dasabcip | =4.1 | |
| Invensys Daserver Runtime Components | <=3.0 | |
| Invensys Daserver Runtime Components | =3.0 | |
| Invensys Dassidirect | <=2.0 | |
| Invensys Intouch\/wonderware Application Server | <=10.0 | |
| Invensys Wonderware Application Server | <=3.1 | |
| Invensys Wonderware Application Server | =3.0 | |
| Invensys Wonderware Application Server | =3.0.200-sp2 | |
| Invensys Wonderware Application Server | =3.1 | |
| Invensys Wonderware Application Server | =3.1-sp1 | |
| Invensys Wonderware Application Server | =3.1.201-sp2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-index
- vendor/invensys
- canonical/invensys dasabcip
- version/invensys dasabcip/4.1
- canonical/invensys daserver runtime components
- version/invensys daserver runtime components/3.0
- canonical/invensys dassidirect
- version/invensys dassidirect/2.0
- canonical/invensys intouch\/wonderware application server
- version/invensys intouch\/wonderware application server/10.0
- canonical/invensys wonderware application server
- version/invensys wonderware application server/3.1
- version/invensys wonderware application server/3.0
- version/invensys wonderware application server/3.0.200-sp2
- version/invensys wonderware application server/3.1-sp1
- version/invensys wonderware application server/3.1.201-sp2