CVE-2007-4827

Related Files

TPTI-07-15.txt

Posted Sep 20, 2007

Authored by Ganesh Devarajan | Site tippingpoint.com

A vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the Automated Solutions Modbus TCP Slave ActiveX Control. Authentication is not required to exploit this vulnerability. The specific flaw exists within MiniHMI.exe which binds to TCP port 502. When processing malformed Modbus requests on this port a controllable heap corruption can occur which may result in execution of arbitrary code.

tags | advisory, remote, arbitrary, tcp, activex

advisories | CVE-2007-4827

SHA-256 | f0520f8bf90c6787cc532807988649bb63df556515fb667dade3c955d0dd7f3a

Download | Favorite | View