CVE-2013-3075

Summary

CVE	CVE-2013-3075
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2013-04-19 11:44:00 UTC
Updated	2013-05-15 04:00:00 UTC
Description	Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities 7.10 and CitectScada 7.10r1, allow remote attackers to execute arbitrary code via a long string, as demonstrated by a long WzTitle property value to a certain ActiveX control.

Risk And Classification

Problem Types: CWE-119

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Mitsubishi-automation	Mitsubishi Mx Component	3	All	All	All
Application	Mitsubishi-automation	Mitsubishi Mx Component	3	All	All	All
Application	Schneider-electric	Citectfacilities	7.10	All	All	All
Application	Schneider-electric	Citectfacilities	7.10	All	All	All
Application	Schneider-electric	Citectscada	7.10	r1	All	All
Application	Schneider-electric	Citectscada	7.10	r1	All	All

References

Reference	Source	Link	Tags
Mitsubishi MX ActiveX Component v3 (ActUWzd.dll (WzTitle)) - Remote Exploit	EXPLOIT-DB	www.exploit-db.com	Exploit
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

590565 Mitsubishi Electric Automation MX Component V3 ActiveX Buffer Overflow Vulnerability (ICSA-13-140-01)