PT-2012-1790

CVE-2011-4039

·

Published

2012-02-10

·

Updated

2012-02-14

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Invensys Wonderware HMI Reports versions 3.42.835.0304 and earlier Ocean Data Systems Dream Report versions prior to 4.0
Description The issue allows user-assisted remote attackers to execute arbitrary code via a malformed file, triggering a "write access violation."
Recommendations For Invensys Wonderware HMI Reports versions 3.42.835.0304 and earlier, update to a version later than 3.42.835.0304 to resolve the issue. For Ocean Data Systems Dream Report versions prior to 4.0, update to version 4.0 or later to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾