CVE-2010-4557

Description

Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted request to port 9001.

Weakness classification

• CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references

• cve@mitre.org — Exploit
• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Vendor Advisory
• cve@mitre.org
• cve@mitre.org — US Government Resource
• cve@mitre.org — US Government Resource
• cve@mitre.org — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory