GE Fanuc CIMPLICITY 'w32rtr.exe' Remote Buffer Overflow Vulnerability

Bugtraq ID:	27447
Class:	Boundary Condition Error
CVE:	CVE-2008-0176
Remote:	Yes
Local:	No
Published:	Jan 24 2008 12:00AM
Updated:	Jan 29 2008 04:27PM
Credit:	Douglas A. Stewart of CERT as well as Gilad Bakas and Eyal Udassin of C4 are credited with the discovery of this vulnerability.
Vulnerable:	GE Fanuc CIMPLICITY 7.0 SIM8 GE Fanuc CIMPLICITY 7.0 SIM7 GE Fanuc CIMPLICITY 6.1 SP6 GE Fanuc CIMPLICITY 6.1 SP5 GE Fanuc CIMPLICITY 6.1 GE Fanuc CIMPLICITY 6.0 GE Fanuc CIMPLICITY 0
Not Vulnerable:	GE Fanuc CIMPLICITY 7.0 SIM9

GE Fanuc CIMPLICITY 'w32rtr.exe' Remote Buffer Overflow Vulnerability

GE Fanuc CIMPLICITY is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently sized buffer.

An attacker can exploit this issue to execute arbitrary code or cause denial-of-service conditions.

Versions prior to CIMPLICITY 7.0 SIM 9 are vulnerable.

GE Fanuc CIMPLICITY 'w32rtr.exe' Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GE Fanuc CIMPLICITY 'w32rtr.exe' Remote Buffer Overflow Vulnerability

Solution:
The vendor has released CIMPLICITY 6.1 SP6 Hot Fix - 010708_162517_6106 and CIMPLICITY 7.0 SIM 9 to address this issue. Please see the references and contact the vendor for information on how to obtain and apply the fixes.

GE Fanuc CIMPLICITY 'w32rtr.exe' Remote Buffer Overflow Vulnerability

References:

• CIMPLICITY Product Page (GE Fanuc)
  
• KB12458 CIMPLICITY 6.1 Security Vulnerabilities reported by C4 to CERT: (GE Fanuc)
  
• C4 Security Advisory - GE Fanuc Cimplicity 6.1 Heap Overflow ("Eyal Udassin" )
  
• Re: C4 Security Advisory - GE Fanuc Cimplicity 6.1 Heap Overflow ([email protected] )
  
• VU#308556 GE Fanuc CIMPLICITY HMI heap buffer overflow (US-CERT)