7T Interactive Graphical SCADA System ODBC Service Remote Stack Based Buffer Overflow Vulnerability

Bugtraq ID:	47597
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 27 2011 12:00AM
Updated:	Apr 27 2011 12:00AM
Credit:	James Burton, Insomnia Security
Vulnerable:	7-Technologies Interactive Graphical SCADA System 0
Not Vulnerable:

7T Interactive Graphical SCADA System ODBC Service Remote Stack Based Buffer Overflow Vulnerability

The 7T Interactive Graphical SCADA System is prone to a remote stack-based buffer-overflow vulnerability.

An attacker could exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

7T Interactive Graphical SCADA System ODBC Service Remote Stack Based Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

7T Interactive Graphical SCADA System ODBC Service Remote Stack Based Buffer Overflow Vulnerability

Solution:
Reportedly, the vendor has fixed the issue; however, Symantec has not confirmed it. Please contact the vendor for more information.

7T Interactive Graphical SCADA System ODBC Service Remote Stack Based Buffer Overflow Vulnerability

References:

• ISVA-110427.1: IGSS ODBC Service Remote Overflow Vulnerability (Insomnia)
  
• IGSS - Interactive Graphical SCADA System (7-Technologies)