Wonderware Archestra ConfigurationAccessComponent Stack Buffer Overflow Vulnerability

Bugtraq ID:	42184
Class:	Boundary Condition Error
CVE:	CVE-2010-2974
Remote:	Yes
Local:	No
Published:	Aug 04 2010 12:00AM
Updated:	Aug 19 2011 05:10PM
Credit:	IOActive
Vulnerable:
Not Vulnerable:

Wonderware Archestra ConfigurationAccessComponent Stack Buffer Overflow Vulnerability

Wonderware Archestra ConfigurationAccessComponent ActiveX control is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Successful exploits may allow an attacker to execute arbitrary code in the context of a user running the affected application. Failed attempts will likely result in denial-of-service conditions.

The vulnerable ActiveX control is included in the following products:

Wonderware Application Server prior to 3.1 Service Pack 2 Patch 01

Wonderware Archestra ConfigurationAccessComponent Stack Buffer Overflow Vulnerability

A commercial exploit is available through the GLEG Agora SCADA+ exploit pack. This exploit is not otherwise publicly available or known to be circulating in the wild.

Wonderware Archestra ConfigurationAccessComponent Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for information.

Wonderware Archestra ConfigurationAccessComponent Stack Buffer Overflow Vulnerability

References:

• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• Vulnerability Note VU#703189 (US-CERT)
  
• Wonderware Tech Alert 138 Security Vulnerability - Wonderware ArchestrA Configur (Invensys)
  
• ICS-CERT ALERT "ICS-ALERT-11-230-01 - AGORA SCADA+ Update 1.4" (ICS-CERT)