PT-2012-1790
CVE-2011-4039
·
Published
2012-02-10
·
Updated
2012-02-14
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Invensys Wonderware HMI Reports versions 3.42.835.0304 and earlier
Ocean Data Systems Dream Report versions prior to 4.0
Description
The issue allows user-assisted remote attackers to execute arbitrary code via a malformed file, triggering a "write access violation."
Recommendations
For Invensys Wonderware HMI Reports versions 3.42.835.0304 and earlier, update to a version later than 3.42.835.0304 to resolve the issue.
For Ocean Data Systems Dream Report versions prior to 4.0, update to version 4.0 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾