CVE-2015-7918: Buffer Overflow
First published: Tue Dec 15 2015(Updated: )
Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedName, (3) DefinedNameLocal, (4) ODBCPrepareEx, (5) ObjCreatePolygon, (6) SetTabbedTextEx, or (7) SetValidationRule method, a different vulnerability than CVE-2015-8561.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Proclima | <=6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01
- http://www.zerodayinitiative.com/advisories/ZDI-15-625
- http://www.zerodayinitiative.com/advisories/ZDI-15-630
- http://www.zerodayinitiative.com/advisories/ZDI-15-631
- http://www.zerodayinitiative.com/advisories/ZDI-15-632
- http://www.zerodayinitiative.com/advisories/ZDI-15-633
- http://www.zerodayinitiative.com/advisories/ZDI-15-634
- http://www.zerodayinitiative.com/advisories/ZDI-15-635
- https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/event
- agent/type
- collector/mitre-cve
- source/MITRE
- vendor/schneider-electric
- canonical/schneider-electric proclima
- version/schneider-electric proclima/6.1