critical10.0Public exploit code
CVE-2013-3075
Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities 7.10 and CitectScada 7.10r1, allow rem…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mitsubishi MX ActiveX Component 3 - 'ActUWzd.dll' 'WzTitle' Remote Heap Spray2013-03-25 · remote · windows · Verified
Impact
Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities 7.10 and CitectScada 7.10r1, allow remote attackers to execute arbitrary code via a long string, as demonstrated by a long WzTitle property value to a certain ActiveX control.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mitsubishi-Automation | Mitsubishi Mx Component | Version 3 |
| Schneider-Electric | Citectfacilities | Version 7.10 |
| Schneider-Electric | Citectscada | Version 7.10 |