CVEvulnerability
CVE-2011-4874
7.9 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-04-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.9 HIGH — AV:A/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in MICROSYS PROMOTIC before 8.1.7 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (data corruption and application crash) via a crafted project (aka .pra) file.
Affected configurations
• microsys promotic (<= 8.1.6)
• microsys promotic 8.0.0
• microsys promotic 8.0.1
• microsys promotic 8.0.2
• microsys promotic 8.0.3
• microsys promotic 8.0.4
• microsys promotic 8.0.5
• microsys promotic 8.0.6
• microsys promotic 8.0.7
• microsys promotic 8.0.8
• microsys promotic 8.0.9
• microsys promotic 8.0.10
• microsys promotic 8.0.11
• microsys promotic 8.0.12
• microsys promotic 8.0.13
• microsys promotic 8.1.0
• microsys promotic 8.1.1
• microsys promotic 8.1.2
• microsys promotic 8.1.3
• microsys promotic 8.1.4
• microsys promotic 8.1.5
Related
Weakness · not in database (1)
References
- http://www.promotic.eu/en/pmdoc/News.htm#ver80107 www.promotic.eu
- http://www.securityfocus.com/bid/52988 www.securityfocus.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-03.pdf US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74846 exchange.xforce.ibmcloud.com
- http://www.promotic.eu/en/pmdoc/News.htm#ver80107 www.promotic.eu
- http://www.securityfocus.com/bid/52988 www.securityfocus.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-03.pdf US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74846 exchange.xforce.ibmcloud.com