CVE-2011-2959 Stack-based buffer overflow in the Open Database Connectivity (ODBC) service (Odbcixv9se.exe) in 7-Technologies Interactive Graphical SCADA System (IGSS) 9 and earlier allows remote attackers to cause...
HighCVSS 10.0
EPSS 6.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the Open Database Connectivity (ODBC) service (Odbcixv9se.exe) in 7-Technologies Interactive Graphical SCADA System (IGSS) 9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet to TCP port 22202.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 7t igss | <= 9 | No fix listed |
| 7t igss | = 2.0 | No fix listed |
| 7t igss | = 3.0 | No fix listed |
| 7t igss | = 4.1 | No fix listed |
| 7t igss | = 5.0 | No fix listed |
| 7t igss | = 5.1 | No fix listed |
| 7t igss | = 6 | No fix listed |
| 7t igss | = 7 | No fix listed |
| 7t igss | = 8 | No fix listed |
References
- 44345 third-party-advisory vendor-advisory
- www.insomniasec.com
- 72117 vdb-entry
- www.us-cert.gov patch us-government-resource