CVE-2012-3026: Input Validation

Published Nov 1, 2012

Updated

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3010 and CVE-2012-3021.

Affected Software

5 affected components

GE Intelligent Platforms Proficy Real-Time Information Portal=2.6

GE Intelligent Platforms Proficy Real-Time Information Portal=3.0

GE Intelligent Platforms Proficy Real-Time Information Portal=3.0-sp1

GE Intelligent Platforms Proficy Real-Time Information Portal=3.5

GE Intelligent Platforms Proficy Real-Time Information Portal=3.5-sp1

Event History

Nov 1, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3026?

CVE-2012-3026 is considered a high-severity vulnerability that can lead to denial of service or remote code execution.

How do I fix CVE-2012-3026?

To fix CVE-2012-3026, you should update to the latest version of GE Intelligent Platforms Proficy Real-Time Information Portal.

What types of attacks are associated with CVE-2012-3026?

CVE-2012-3026 allows remote attackers to exploit memory corruption and potentially execute arbitrary code through long input data.

Which versions of GE Intelligent Platforms are affected by CVE-2012-3026?

CVE-2012-3026 affects GE Intelligent Platforms Proficy Real-Time Information Portal versions 2.6 through 3.5 SP1.

Is CVE-2012-3026 a local or remote vulnerability?

CVE-2012-3026 is a remote vulnerability that can be exploited without physical access to the affected system.