KingView 'HistoryServer.exe' Heap Based Buffer Overflow Vulnerability

Bugtraq ID:	51159
Class:	Boundary Condition Error
CVE:	CVE-2011-4536
Remote:	Yes
Local:	No
Published:	Dec 21 2011 12:00AM
Updated:	Dec 22 2011 07:30PM
Credit:	Luigi Auriemma
Vulnerable:	Wellintech KingView 65.30.2010.18018
Not Vulnerable:

KingView 'HistoryServer.exe' Heap Based Buffer Overflow Vulnerability

KingView is prone to a heap-based buffer-overflow vulnerability because it fails to properly validate user-supplied input.

Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts will likely result in denial-of-service conditions.

KingView 65.30.2010.18018 is vulnerable; other versions may also be affected.

KingView 'HistoryServer.exe' Heap Based Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

KingView 'HistoryServer.exe' Heap Based Buffer Overflow Vulnerability

Solution:
A vendor patch is available. Please see the references for more information.

KingView 'HistoryServer.exe' Heap Based Buffer Overflow Vulnerability

References:

• ICSA-11-355-02�??WELLINTECH KINGVIEW HISTORYSERVER BUFFER OVERFLOW (ICS-CERT)
  
• KingView Homepage (Wellintech)
  
• KingView patch nettransdll.dll-2011 update (Wellintech)
  
• WellinTech KingView HistoryServer.exe Opcode 3 Parsing Remote Code Execution Vul (TippingPoint Zero Day Initiative)