CVE-2012-3010: Input Validation

Published Nov 1, 2012

Updated

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3021 and CVE-2012-3026.

Affected Software

5 affected components

GE Intelligent Platforms Proficy Real-Time Information Portal=2.6

GE Intelligent Platforms Proficy Real-Time Information Portal=3.0

GE Intelligent Platforms Proficy Real-Time Information Portal=3.0-sp1

GE Intelligent Platforms Proficy Real-Time Information Portal=3.5

GE Intelligent Platforms Proficy Real-Time Information Portal=3.5-sp1

Event History

Nov 1, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3010?

CVE-2012-3010 is classified as a high severity vulnerability due to its potential to cause denial of service and arbitrary code execution.

How do I fix CVE-2012-3010?

To address CVE-2012-3010, users should upgrade to the latest patched version of the GE Intelligent Platforms Proficy Real-Time Information Portal.

What versions are affected by CVE-2012-3010?

CVE-2012-3010 affects versions 2.6, 3.0, 3.0 SP1, 3.5, and 3.5 SP1 of the GE Intelligent Platforms Proficy Real-Time Information Portal.

What type of attack does CVE-2012-3010 facilitate?

CVE-2012-3010 allows remote attackers to conduct denial of service attacks through memory corruption, potentially leading to service crashes.

Can CVE-2012-3010 lead to arbitrary code execution?

Yes, if successfully exploited, CVE-2012-3010 may allow remote attackers to execute arbitrary code on the affected systems.