CVE-2012-3021: Input Validation

Published Nov 1, 2012

Updated

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3010 and CVE-2012-3026.

Affected Software

5 affected components

GE Intelligent Platforms Proficy Real-Time Information Portal=2.6

GE Intelligent Platforms Proficy Real-Time Information Portal=3.0

GE Intelligent Platforms Proficy Real-Time Information Portal=3.0-sp1

GE Intelligent Platforms Proficy Real-Time Information Portal=3.5

GE Intelligent Platforms Proficy Real-Time Information Portal=3.5-sp1

Event History

Nov 1, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3021?

CVE-2012-3021 has been classified as a vulnerability that could lead to denial of service or arbitrary code execution.

How do I fix CVE-2012-3021?

To fix CVE-2012-3021, you should update the GE Intelligent Platforms Proficy Real-Time Information Portal to the latest version or apply any available security patches.

What software versions are affected by CVE-2012-3021?

CVE-2012-3021 affects GE Intelligent Platforms Proficy Real-Time Information Portal versions 2.6, 3.0, 3.0 SP1, 3.5, and 3.5 SP1.

Can CVE-2012-3021 be exploited remotely?

Yes, CVE-2012-3021 can be exploited remotely by attackers utilizing crafted input data.

What are the potential impacts of CVE-2012-3021?

The potential impacts of CVE-2012-3021 include service crashes due to memory corruption and the possibility of executing arbitrary code.