ABB WebWare Server 'RobNetScanHost.exe' Buffer Overflow Vulnerability

Bugtraq ID:	52123
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 22 2012 12:00AM
Updated:	Feb 22 2012 12:00AM
Credit:	Luigi Auriemma via TippingPoint Zero Day Initiative.
Vulnerable:	ABB WebWare Server 0
Not Vulnerable:

ABB WebWare Server 'RobNetScanHost.exe' Buffer Overflow Vulnerability

ABB WebWare Server is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Attackers may exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

ABB Products Robot Communications Runtime 'RobNetScanHost.exe' Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ABB Products Robot Communications Runtime 'RobNetScanHost.exe' Buffer Overflow Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

ABB Products Robot Communications Runtime 'RobNetScanHost.exe' Buffer Overflow Vulnerability

References:

• ABB Homepage (ABB)
  
• ABB WebWare Server 'RobNetScanHost.exe' Remote Code Execution Vulnerability (TippingPoint Zero Day Initiative)
  
• ABB-VU-DMRO-38599: Buffer Overflow in Robot Communications Runtime on Window (ABB)
  
• ICSA-12-059-01�??ABB ROBOT COMMUNICATIONS RUNTIME BUFFER OVERFLOW VULNERABILITY (CERT)