CVEvulnerability
CVE-2011-1919
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-11-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted TCP message traffic to (1) PRProficyMgr.exe in Proficy Server Manager, (2) PRGateway.exe in Proficy Server Gateway, (3) PRRDS.exe in Proficy Remote Data Service, or (4) PRLicenseMgr.exe in Proficy Server License Manager.
Affected configurations
• ge intelligent platforms proficy historian (<= 4.4.1)
• ge intelligent platforms proficy historian 4.0
• ge intelligent platforms proficy historian 5.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/50474 www.securityfocus.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-243-01.pdf US Government Resource
- http://www.securityfocus.com/bid/50474 www.securityfocus.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-243-01.pdf US Government Resource