CVE-2012-3007

Published: Jul 5, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform software suite, as used in InTouch/Wonderware Application Server IT before 10.5 and WAS before 3.5, DASABCIP before 4.1 SP2, DASSiDirect before 3.0, DAServer Runtime Components before 3.0 SP2, and other products, allows remote attackers to cause a denial of service (daemon crash or hang) via a long Unicode string.

Affected (12)

Products: Invensys: Dasabcip, Daserver Runtime Components, Dassidirect, Intouch/wonderware Application Server, Wonderware Application Server

Invensys

5 products

Dasabcip

Daserver Runtime Components

Dassidirect

Intouch/wonderware Application Server

Wonderware Application Server

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Invensys Dasabcip	Up to 4.1
Invensys Dasabcip	Version 4.1
Invensys Daserver Runtime Components	Up to 3.0
Invensys Daserver Runtime Components	Version 3.0
Invensys Dassidirect	Up to 2.0
Invensys Intouch/wonderware Application Server	Up to 10.0
Invensys Wonderware Application Server	Up to 3.1
Invensys Wonderware Application Server	Version 3.0.200 sp2
Invensys Wonderware Application Server	Version 3.0
Invensys Wonderware Application Server	Version 3.1.201 sp2
Invensys Wonderware Application Server	Version 3.1
Invensys Wonderware Application Server	Version 3.1 sp1