GE Proficy Historian Data Archiver Service Remote Buffer Overflow Vulnerability

Bugtraq ID:	50475
Class:	Boundary Condition Error
CVE:	CVE-2011-1918
Remote:	Yes
Local:	No
Published:	Nov 01 2011 12:00AM
Updated:	Mar 19 2015 08:09AM
Credit:	GE and Zero Day Initiative.
Vulnerable:	General Electric Proficy HMI/SCADA-iFIX 5.1 General Electric Proficy HMI/SCADA-iFIX 5.0 General Electric Proficy HMI/SCADA-CIMPLICITY 8.1 General Electric Proficy Historian 4.0 General Electric Proficy Historian 0
Not Vulnerable:

GE Proficy Historian Data Archiver Service Remote Buffer Overflow Vulnerability

GE Proficy Historian is prone to a remote stack-based buffer-overflow vulnerability that affects the Data Archiver service.

An attacker could exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

GE Proficy Historian Data Archiver Service Remote Buffer Overflow Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

GE Proficy Historian Data Archiver Service Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

GE Proficy Historian Data Archiver Service Remote Buffer Overflow Vulnerability

References:

• GE Intelligent Platforms Product Security Advisory (GE)
  
• GE Proficy Historian Homepage (GE)
  
• GE Proficy iFix HMI/SCADA ihDataArchiver.exe Trusted Header Size Remote Code Exe (TippingPoint Zero Day Initiative)
  
• ICSA-11-243-03�??GE INTELLIGENT PLATFORMS PROFICY HISTORIAN DATA ARCHIVER BUFFER O (CERT)