critical10.0Public exploit code
CVE-2011-3491
Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- progea movicon / powerhmi 11.2.1085 - Multiple Vulnerabilities2011-09-14 · dos · windows
Impact
Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative Content-Length field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progea | Movicon Powerhmi | through 11.2.1085 Versions 11, 11.0.1017 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/movicon_1-adv.txt
- http://osvdb.org/75494
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69787
- http://aluigi.altervista.org/adv/movicon_1-adv.txt
- http://osvdb.org/75494
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69787