CVEvulnerability
CVE-2010-4142
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-11-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) SCPC_INITIALIZE, (2) SCPC_INITIALIZE_RF, or (3) SCPC_TXTEVENT packet. NOTE: it was later reported that 1.06 is also affected by one of these requests.
Affected configurations
• realflex realwin 1.06
• realflex realwin 2.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://aluigi.org/adv/realwin_1-adv.txt Exploit
- http://secunia.com/advisories/41849 Vendor Advisory
- http://www.exploit-db.com/exploits/15259 Exploit
- http://www.exploit-db.com/exploits/15337 Exploit
- http://www.securityfocus.com/bid/44150 Exploit
- http://aluigi.org/adv/realwin_1-adv.txt Exploit
- http://secunia.com/advisories/41849 Vendor Advisory
- http://www.exploit-db.com/exploits/15259 Exploit
- http://www.exploit-db.com/exploits/15337 Exploit
- http://www.securityfocus.com/bid/44150 Exploit