← back
CVE-2015-7918

CVE-2015-7918

EPSS 5.7%
Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedName, (3) DefinedNameLocal, (4) ODBCPrepareEx, (5) ObjCreatePolygon, (6) SetTabbedTextEx, or (7) SetValidationRule method, a different vulnerability than CVE-2015-8561.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02http://www.zerodayinitiative.com/advisories/ZDI-15-625http://www.zerodayinitiative.com/advisories/ZDI-15-630http://www.zerodayinitiative.com/advisories/ZDI-15-631http://www.zerodayinitiative.com/advisories/ZDI-15-632http://www.zerodayinitiative.com/advisories/ZDI-15-633http://www.zerodayinitiative.com/advisories/ZDI-15-634http://www.zerodayinitiative.com/advisories/ZDI-15-635