ByteOS Network

NVD Vulnerability Details :

CVE-2012-3007

Deferred

Source-ics-cert@hq.dhs.gov

Published At-05 Jul, 2012 | 03:23

Updated At-11 Apr, 2025 | 00:51

Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform software suite, as used in InTouch/Wonderware Application Server IT before 10.5 and WAS before 3.5, DASABCIP before 4.1 SP2, DASSiDirect before 3.0, DAServer Runtime Components before 3.0 SP2, and other products, allows remote attackers to cause a denial of service (daemon crash or hang) via a long Unicode string.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P

CPE Matches

invensys>>dasabcip>>Versions up to 4.1(inclusive)

cpe:2.3:a:invensys:dasabcip:*:sp1:*:*:*:*:*:*

invensys>>dasabcip>>4.1

cpe:2.3:a:invensys:dasabcip:4.1:*:*:*:*:*:*:*

invensys>>daserver_runtime_components>>Versions up to 3.0(inclusive)

cpe:2.3:a:invensys:daserver_runtime_components:*:sp1:*:*:*:*:*:*

invensys>>daserver_runtime_components>>3.0

cpe:2.3:a:invensys:daserver_runtime_components:3.0:*:*:*:*:*:*:*

invensys>>dassidirect>>Versions up to 2.0(inclusive)

cpe:2.3:a:invensys:dassidirect:*:*:*:*:*:*:*:*

invensys>>intouch\/wonderware_application_server>>Versions up to 10.0(inclusive)

cpe:2.3:a:invensys:intouch\/wonderware_application_server:*:*:*:*:*:*:*:*

invensys>>wonderware_application_server>>Versions up to 3.1(inclusive)

cpe:2.3:a:invensys:wonderware_application_server:*:sp2:*:*:*:*:*:*

invensys>>wonderware_application_server>>3.0

cpe:2.3:a:invensys:wonderware_application_server:3.0:*:*:*:*:*:*:*

invensys>>wonderware_application_server>>3.0.200

cpe:2.3:a:invensys:wonderware_application_server:3.0.200:sp2:*:*:*:*:*:*

invensys>>wonderware_application_server>>3.1

cpe:2.3:a:invensys:wonderware_application_server:3.1:*:*:*:*:*:*:*

invensys>>wonderware_application_server>>3.1

cpe:2.3:a:invensys:wonderware_application_server:3.1:sp1:*:*:*:*:*:*

invensys>>wonderware_application_server>>3.1.201

cpe:2.3:a:invensys:wonderware_application_server:3.1.201:sp2:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/49173	ics-cert@hq.dhs.gov	N/A
http://www.securityfocus.com/bid/53563	ics-cert@hq.dhs.gov	N/A
http://www.us-cert.gov/control_systems/pdf/ICSA-12-171-01.pdf	ics-cert@hq.dhs.gov	US Government Resource
http://secunia.com/advisories/49173	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/53563	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.us-cert.gov/control_systems/pdf/ICSA-12-171-01.pdf	af854a3a-2127-422b-91ae-364da2661108	US Government Resource

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History