First published: Thu Nov 01 2012(Updated: )
rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3021 and CVE-2012-3026.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
GE Intelligent Platforms Proficy Real-Time Information Portal | =2.6 | |
GE Intelligent Platforms Proficy Real-Time Information Portal | =3.0 | |
GE Intelligent Platforms Proficy Real-Time Information Portal | =3.0-sp1 | |
GE Intelligent Platforms Proficy Real-Time Information Portal | =3.5 | |
GE Intelligent Platforms Proficy Real-Time Information Portal | =3.5-sp1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-3010 is classified as a high severity vulnerability due to its potential to cause denial of service and arbitrary code execution.
To address CVE-2012-3010, users should upgrade to the latest patched version of the GE Intelligent Platforms Proficy Real-Time Information Portal.
CVE-2012-3010 affects versions 2.6, 3.0, 3.0 SP1, 3.5, and 3.5 SP1 of the GE Intelligent Platforms Proficy Real-Time Information Portal.
CVE-2012-3010 allows remote attackers to conduct denial of service attacks through memory corruption, potentially leading to service crashes.
Yes, if successfully exploited, CVE-2012-3010 may allow remote attackers to execute arbitrary code on the affected systems.