CVE-2011-1918

Published: Nov 2, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted TCP message traffic.

Affected (2)

Products: Ge: Intelligent Platforms Proficy Historian

1 product

Intelligent Platforms Proficy Historian

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ge Intelligent Platforms Proficy Historian	Up to 3.5
Ge Intelligent Platforms Proficy Historian	Version 4.0

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (6)

http://ics-cert.us-cert.gov/advisories/ICSA-11-243-03A

Source: cret@cert.org

http://www.securityfocus.com/bid/50475

Source: cret@cert.org

http://www.us-cert.gov/control_systems/pdf/ICSA-11-243-03.pdf

Source: cret@cert.org

US Government Resource

http://ics-cert.us-cert.gov/advisories/ICSA-11-243-03A

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/50475

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/control_systems/pdf/ICSA-11-243-03.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.