CVE-2012-3793

Integer overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service (daemon crash) via a crafted packet with a certain opcode that triggers an incorrect memory allocation and a buffer overflow.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:pro-face:pro-server_ex:*:*:*:*:*:*:*:*
cpe:2.3:a:pro-face:pro-server_ex:1.21.000:*:*:*:*:*:*:*
cpe:2.3:a:pro-face:pro-server_ex:1.23.000:*:*:*:*:*:*:*
cpe:2.3:a:pro-face:pro-server_ex:1.24.200:*:*:*:*:*:*:*
cpe:2.3:a:pro-face:wingp_pc_runtime:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:41

Type Values Removed Values Added
References () http://aluigi.org/adv/proservrex_1-adv.txt - Exploit () http://aluigi.org/adv/proservrex_1-adv.txt - Exploit
References () http://ics-cert.us-cert.gov/advisories/ICSA-12-179-01 - () http://ics-cert.us-cert.gov/advisories/ICSA-12-179-01 -
References () http://secunia.com/advisories/49172 - () http://secunia.com/advisories/49172 -
References () http://www.securityfocus.com/bid/53499 - () http://www.securityfocus.com/bid/53499 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/75547 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/75547 -
References () https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt - () https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt -
References () https://www.hmisource.com/otasuke/news/2012/0606.html - Vendor Advisory () https://www.hmisource.com/otasuke/news/2012/0606.html - Vendor Advisory

Information

Published : 2012-06-25 17:55

Updated : 2024-11-21 01:41


NVD link : CVE-2012-3793

Mitre link : CVE-2012-3793

CVE.ORG link : CVE-2012-3793


JSON object : View

Products Affected

pro-face

  • pro-server_ex
  • wingp_pc_runtime
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer