CVE-2011-3143

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2011-3143
Use-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified long strings that trigger heap memory corruption.

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://secunia.com/advisories/44955 Third Party Advisory
http://www.digitalbond.com/scadapedia/vulnerability-notes/heap-overflow-vulnerability/ Broken Link Third Party Advisory
http://www.osvdb.org/72989 Broken Link
http://www.securityfocus.com/bid/46312 Third Party Advisory VDB Entry
http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01.pdf Patch Third Party Advisory US Government Resource
http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01A.pdf Patch Third Party Advisory US Government Resource
http://secunia.com/advisories/44955 Third Party Advisory
http://www.digitalbond.com/scadapedia/vulnerability-notes/heap-overflow-vulnerability/ Broken Link Third Party Advisory
http://www.osvdb.org/72989 Broken Link
http://www.securityfocus.com/bid/46312 Third Party Advisory VDB Entry
http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01.pdf Patch Third Party Advisory US Government Resource
http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01A.pdf Patch Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:aveva:clearscada:2005:*:*:*:*:*:*:*
cpe:2.3:a:aveva:clearscada:2007:*:*:*:*:*:*:*
cpe:2.3:a:aveva:clearscada:2009:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:schneider-electric:scx_67:*:*:*:*:*:*:*:*
cpe:2.3:a:schneider-electric:scx_68:*:*:*:*:*:*:*:*
History

21 Nov 2024, 01:29

Type Values Removed Values Added
References () http://secunia.com/advisories/44955 - Third Party Advisory () http://secunia.com/advisories/44955 - Third Party Advisory
References () http://www.digitalbond.com/scadapedia/vulnerability-notes/heap-overflow-vulnerability/ - Broken Link, Third Party Advisory () http://www.digitalbond.com/scadapedia/vulnerability-notes/heap-overflow-vulnerability/ - Broken Link, Third Party Advisory
References () http://www.osvdb.org/72989 - Broken Link () http://www.osvdb.org/72989 - Broken Link
References () http://www.securityfocus.com/bid/46312 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/46312 - Third Party Advisory, VDB Entry
References () http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01.pdf - Patch, Third Party Advisory, US Government Resource () http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01.pdf - Patch, Third Party Advisory, US Government Resource
References () http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01A.pdf - Patch, Third Party Advisory, US Government Resource () http://www.us-cert.gov/control_systems/pdf/ICSA-10-314-01A.pdf - Patch, Third Party Advisory, US Government Resource
Information

Published : 2011-08-16 21:55

Updated : 2025-04-11 00:51

NVD link : CVE-2011-3143

Mitre link : CVE-2011-3143

CVE.ORG link : CVE-2011-3143

JSON object : View

Products Affected

schneider-electric

  • scx_68
  • scx_67

aveva

  • clearscada
CWE
CWE-399

Resource Management Errors