CVE-2010-4142 Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) SCP...
HighCVSS 10.0
EPSS 63.0%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) SCPC_INITIALIZE, (2) SCPC_INITIALIZE_RF, or (3) SCPC_TXTEVENT packet. NOTE: it was later reported that 1.06 is also affected by one of these requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realflex realwin | = 1.06 | No fix listed |
| realflex realwin | = 2.0 | No fix listed |
References
- aluigi.org exploit
- 41849 third-party-advisory vendor-advisory
- 15259 exploit
- 15337 exploit
- 44150 exploit vdb-entry