Progea Movicon Multiple Heap Based Buffer Overflow and Denial of Service Vulnerabilities

Bugtraq ID:	49605
Class:	Boundary Condition Error
CVE:	CVE-2011-3491 CVE-2011-3498 CVE-2011-3499
Remote:	Yes
Local:	No
Published:	Sep 13 2011 12:00AM
Updated:	Oct 21 2011 04:01PM
Credit:	Luigi Auriemma
Vulnerable:	Progea Movicon PowerHMI 11.2.1085 Progea Movicon 11.2.1085.4 Progea Movicon 11.2.1085.3 Progea Movicon 11.2 Build 1085 Progea Movicon 11.2 Build 1084 Progea Movicon 11.2
Not Vulnerable:

Progea Movicon Multiple Heap Based Buffer Overflow and Denial of Service Vulnerabilities

Movicon is prone to multiple heap-based buffer-overflow vulnerabilities and a denial-of-service vulnerability.

Remote attackers can exploit these issues to execute arbitrary code in the context of the application or cause denial-of-service conditions.

Movicon 11.2 Build 1085 is vulnerable; other versions may also be affected.

Progea Movicon Multiple Heap Based Buffer Overflow and Denial of Service Vulnerabilities

The following example input and exploit code are available:

• /data/vulnerabilities/exploits/49605.zip

Progea Movicon Multiple Heap Based Buffer Overflow and Denial of Service Vulnerabilities

Solution:
Vendor updates are available. Please contact the vendor for more information.

Progea Movicon Multiple Heap Based Buffer Overflow and Denial of Service Vulnerabilities

References:

• Movicon Homepage (Progea)
  
• Progea Movicon / PowerHMI heap overflow (Luigi Auriemma)
  
• Progea Movicon / PowerHMI memory corruption (Luigi Auriemma)
  
• Progea Movicon / PowerHMI memory corruption (Luigi Auriemma)
  
• ICSA-11-294-01�??PROGEA MOVICON POWERHMI (ICS-CERT)