CVE-2011-2960 Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a cr...
HighCVSS 10.0
EPSS 17.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sunwayland forcecontrol | = 6.1-sp1 | No fix listed |
| sunwayland forcecontrol | = 6.1-sp2 | No fix listed |
| sunwayland forcecontrol | = 6.1-sp3 | No fix listed |
References
- 45033 third-party-advisory vendor-advisory
- 1025672 vdb-entry
- www.cnvd.org.cn
- 73124 vdb-entry
- www.sunwayland.com.cn vendor-advisory
- www.us-cert.gov us-government-resource