CVE-2014-9205 Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICROSYS PROMOTIC stable before 8.2.19 and PROMOTIC development before 8.3.2 allows remote att...
HighCVSS 7.5
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICROSYS PROMOTIC stable before 8.2.19 and PROMOTIC development before 8.3.2 allows remote attackers to execute arbitrary code by providing a large amount of data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsys promotic | <= 8.2.18 | No fix listed |
| microsys promotic | <= 8.3.1 | No fix listed |
References
- www.promotic.eu vendor-advisory
- www.zerodayinitiative.com
- ics-cert.us-cert.gov third-party-advisory us-government-resource