DATAC RealWin HMI Service Multiple Remote Buffer Overflow Vulnerabilities

Bugtraq ID:	44150
Class:	Boundary Condition Error
CVE:	CVE-2010-4142
Remote:	Yes
Local:	No
Published:	Oct 15 2010 12:00AM
Updated:	Nov 19 2010 06:26PM
Credit:	Luigi Auriemma
Vulnerable:	DATAC Control International RealWin SCADA Server 2.0 DATAC Control International RealWin SCADA Server 1.06
Not Vulnerable:	DATAC Control International RealWin SCADA Server 2.1.10

DATAC RealWin HMI Service Multiple Remote Buffer Overflow Vulnerabilities

DATAC RealWin is prone to multiple remote buffer-overflow vulnerabilities that affect the HMI service.

Attackers can leverage these issues to execute arbitrary code in the context of the application. Failed exploit attempts will cause a denial-of-service condition.

DATAC RealWin versions 2.0 and prior are vulnerable; other versions may also be affected.

DATAC RealWin HMI Service Multiple Remote Buffer Overflow Vulnerabilities

The following exploits are available:

• /data/vulnerabilities/exploits/44150.zip
• /data/vulnerabilities/exploits/44150.rb
• /data/vulnerabilities/exploits/44150-1.rb
• /data/vulnerabilities/exploits/44150-blake.py
• /data/vulnerabilities/exploits/44150-2.rb

DATAC RealWin HMI Service Multiple Remote Buffer Overflow Vulnerabilities

Solution:
Updates are available; please see the references for more information.

DATAC RealWin HMI Service Multiple Remote Buffer Overflow Vulnerabilities

References:

• ALERT: RealWin buffer overflow vulnerability (RealFlex Technologies Ltd)
  
• DATAC RealWin (Luigi Auriemma)
  
• Product Homepage (DATAC Control International Ltd)
  
• Vendor Homepage (RealFlex Technologies Ltd)
  
• VU#222657 RealFlex RealWin HMI service buffer overflows (US-CERT)