NVD

Id
44684  
Name
CVE-2012-3007  
Description
Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform software suite, as used in InTouch/Wonderware Application Server IT before 10.5 and WAS before 3.5, DASABCIP before 4.1 SP2, DASSiDirect before 3.0, DAServer Runtime Components before 3.0 SP2, and other products, allows remote attackers to cause a denial of service (daemon crash or hang) via a long Unicode string.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-07-04  
Modified Date
2012-08-13  
Seq
2012-3007  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
224244 44684 CVE-2012-3007 53563  View
224245 44684 CVE-2012-3007 http://www.us-cert.gov/control_systems/pdf/ICSA-12-171-01.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27308 JVNDB-2012-003015 Invensys System Platform software suite におけるスタックベースのバッファオーバーフローの脆弱性 複数の製品で使用される Invensys System Platform software suite の Invensys Wonderware SuiteLink 内の slssvc.exe には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2012-3007 56245 CVE-2012-3007 44684 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003015.html 2012-07-05 2012-07-06 View