CVE

Id
45558  
CVE No.
CVE-2010-2974  
Status
Candidate  
Description
Stack-based buffer overflow in the IConfigurationAccess interface in the Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control in Wonderware Application Server (WAS) before 3.1 SP2 P01, as used in the Wonderware Archestra Integrated Development Environment (IDE) and the InFusion Integrated Engineering Environment (IEE), allows remote attackers to execute arbitrary code via the first argument to the UnsubscribeData method.  
Phase
Assigned (20100805)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
496310 45558 CVE-2010-2974 CONFIRM:http://www.kb.cert.org/vuls/id/MORO-87MHPT  View
496311 45558 CVE-2010-2974 CONFIRM:http://www.pacwest.wonderware.com/web/News/NewsDetails.aspx?NewsID=203108  View
496312 45558 CVE-2010-2974 CONFIRM:https://wdnresource.wonderware.com/support/kbcd/html/1/t002492.htm  View
496313 45558 CVE-2010-2974 CERT-VN:VU#703189  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38462 JVNDB-2010-004247 Cisco UWN Solution におけるアクセス制限を回避される脆弱性 Cisco Unified Wireless Network (UWN) Solution は、自身が署名する証明書に強度が十分なメッセージダイジェストアルゴリズムを使用しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2010-2978 45558 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004247.html  View