CVE-2014-0781
14.03.2014, 10:55
Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| yokogawa | centum_cs_3000 | 𝑥 ≤ r3.09.50 |
| yokogawa | centum_cs_3000 | r3.01 |
| yokogawa | centum_cs_3000 | r3.02 |
| yokogawa | centum_cs_3000 | r3.03 |
| yokogawa | centum_cs_3000 | r3.04 |
| yokogawa | centum_cs_3000 | r3.05 |
| yokogawa | centum_cs_3000 | r3.06 |
| yokogawa | centum_cs_3000 | r3.07 |
| yokogawa | centum_cs_3000 | r3.08 |
| yokogawa | centum_cs_3000 | r3.08.50 |
| yokogawa | centum_cs_3000 | r3.08.70 |
| yokogawa | centum_cs_3000 | r3.09 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-122 - Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
References