CVE-2012-4706: Buffer Overflow
Published Feb 24, 2013
·Updated
Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted packet that triggers a heap-based buffer overflow.
Affected Software
17 affected components
3s-software Codesys Gateway-server<=2.3.9.20
3s-software Codesys Gateway-server=2.3.5.1
3s-software Codesys Gateway-server=2.3.5.2
3s-software Codesys Gateway-server=2.3.5.3
3s-software Codesys Gateway-server=2.3.6.0
3s-software Codesys Gateway-server=2.3.7.0
3s-software Codesys Gateway-server=2.3.8.0
3s-software Codesys Gateway-server=2.3.8.1
3s-software Codesys Gateway-server=2.3.8.2
3s-software Codesys Gateway-server=2.3.9
3s-software Codesys Gateway-server=2.3.9.1
3s-software Codesys Gateway-server=2.3.9.2
3s-software Codesys Gateway-server=2.3.9.3
3s-software Codesys Gateway-server=2.3.9.4
3s-software Codesys Gateway-server=2.3.9.5
3s-software Codesys Gateway-server=2.3.9.18
3s-software Codesys Gateway-server=2.3.9.19
Event History
Feb 24, 2013
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4706?
CVE-2012-4706 is classified as a high severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2012-4706?
To remediate CVE-2012-4706, you should upgrade to Codesys Gateway-Server version 2.3.9.27 or later.
3
What systems are affected by CVE-2012-4706?
CVE-2012-4706 affects Codesys Gateway-Server versions up to 2.3.9.20 and several specific earlier versions.
4
What type of vulnerability is CVE-2012-4706?
CVE-2012-4706 is an integer signedness error that leads to a heap-based buffer overflow.
5
Can CVE-2012-4706 be exploited remotely?
Yes, CVE-2012-4706 can be exploited remotely by sending a crafted packet to the vulnerable server.