CVE-2011-4536

Name of the Vulnerable Software and Affected Versions WellinTech KingView versions 6.53 and 65.30.2010.18018

Description The issue is related to a heap-based buffer overflow in the nettransdll.dll component of HistorySvr.exe, also known as HistoryServer.exe, which allows remote attackers to execute arbitrary code. This can be achieved by sending a crafted op-code 3 packet.

Recommendations For WellinTech KingView version 6.53, update to a version that fixes the heap-based buffer overflow issue. For WellinTech KingView version 65.30.2010.18018, update to a version that fixes the heap-based buffer overflow issue. As a temporary workaround, consider restricting access to the nettransdll.dll component until a patch is available.