CVE-2010-4740

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• BACnet OPC Client - Local Buffer Overflow (1)2010-09-16 · local · windows · Verified

Impact

Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://packetstormsecurity.org/1009-exploits/bacnet-overflow.py.txt
• http://secunia.com/advisories/41466
• http://securityreason.com/securityalert/8083
• http://www.kb.cert.org/vuls/id/660688
• http://www.securityfocus.com/bid/43289
• http://www.us-cert.gov/control_systems/pdf/ICSA-10-264-01.pdf
• http://packetstormsecurity.org/1009-exploits/bacnet-overflow.py.txt
• http://secunia.com/advisories/41466
• http://securityreason.com/securityalert/8083
• http://www.kb.cert.org/vuls/id/660688
• http://www.securityfocus.com/bid/43289
• http://www.us-cert.gov/control_systems/pdf/ICSA-10-264-01.pdf