7T Interactive Graphical SCADA System Malformed Packet Remote Memory Corruption Vulnerability

Bugtraq ID:	46310
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 10 2011 12:00AM
Updated:	Mar 23 2011 07:06PM
Credit:	Jeremy Brown
Vulnerable:	7-Technologies Interactive Graphical SCADA System 9 7-Technologies Interactive Graphical SCADA System 8
Not Vulnerable:

7T Interactive Graphical SCADA System Malformed Packet Remote Memory Corruption Vulnerability

7T Interactive Graphical SCADA System is prone to a remote memory-corruption vulnerability.

An attacker can exploit this issue to execute arbitrary code with administrative privileges. Successfully exploiting this issue will completely comprise the affected system. Failed exploit attempts will result in a denial-of-service condition.

7T Interactive Graphical SCADA System Malformed Packet Remote Memory Corruption Vulnerability

The following proof-of-concept code is available:

• /data/vulnerabilities/exploits/46310.py

7T Interactive Graphical SCADA System Malformed Packet Remote Memory Corruption Vulnerability

Solution:
Vendor updates are available. Please see the references for details.

7T Interactive Graphical SCADA System Malformed Packet Remote Memory Corruption Vulnerability

References:

• ICSA-11-018-02�??IGSS 8 ODBC SERVER REMOTE HEAP CORRUPTION (US-CERT)
  
• IGSS - Interactive Graphical SCADA System (7-Technologies)