Wecon LEVI Studio HMI Editor CVE-2017-13999 Multiple Stack Based Buffer Overflow Vulnerabilities

Bugtraq ID:	101250
Class:	Boundary Condition Error
CVE:	CVE-2017-13999
Remote:	Yes
Local:	No
Published:	Oct 12 2017 12:00AM
Updated:	Oct 12 2017 12:00AM
Credit:	Andrea (rgod) Micalizzi, working with iDefense Labs.
Vulnerable:	Wecon Technologies LEVI Studio HMI Editor 1.8.1 Wecon Technologies LEVI Studio HMI Editor 1.8
Not Vulnerable:	Wecon Technologies LEVI Studio HMI Editor 1.8.2

Wecon LEVI Studio HMI Editor CVE-2017-13999 Multiple Stack Based Buffer Overflow Vulnerabilities

Wecon LEVI Studio HMI Editor is prone to multiple stack-based buffer-overflow vulnerabilities.

Attackers can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely cause denial-of-service conditions.

Wecon Technologies LEVI Studio HMI Editor version prior to 1.8.2 are vulnerable.

Wecon LEVI Studio HMI Editor CVE-2017-13999 Multiple Stack Based Buffer Overflow Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Wecon LEVI Studio HMI Editor CVE-2017-13999 Multiple Stack Based Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.