NVD

Id
30793  
Name
CVE-2014-2364  
Description
Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10) SetBaud, or (11) IPAddress parameter to an ActiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-07-19  
Modified Date
2015-08-11  
Seq
2014-2364  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162186 30793 CVE-2014-2364 http://ics-cert.us-cert.gov/advisories/ICSA-14-198-02  View
162187 30793 CVE-2014-2364 http://packetstormsecurity.com/files/128384/Advantech-WebAccess-dvs.ocx-GetColor-Buffer-Overflow.html  View
162188 30793 CVE-2014-2364 68714  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14612 JVNDB-2014-003487 Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性 Advantech WebAccess には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-2364 69651 CVE-2014-2364 30793 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003487.html 2014-07-17 2014-07-22 View