CVE-2011-2960

EPSS 17.6%

Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted URL.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/35864unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/45033 http://securitytracker.com/id?1025672 http://www.cnvd.org.cn/vulnerability/CNVD-2011-05347 http://www.osvdb.org/73124 http://www.sunwayland.com.cn/news_info_.asp?Nid=3593 http://www.us-cert.gov/control_systems/pdf/ICSA-11-167-01.pdf