CVE-2010-4597

심각 10.0CVE-2010-4597 · Published 23/12/2010 · updated 16/06/2026

Package	Affected versions	Patched versions
integraxor ecava	`≤ 3.5.3900.5`	No fix yet

Description

Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Interface (HMI) before 3.5.3900.10 allows remote attackers to execute arbitrary code via a long string in the second argument.

References

secunia.com/advisories/42650
exploit-db.com/exploits/15767 · Exploit
integraxor.com/blog/integraxor-3-5-scada-security-issue-20101006-0109-vulnerability-note · Vendor Advisory
kb.cert.org/vuls/id/603928 · US Government Resource
securityfocus.com/bid/45487 · Exploit
us-cert.gov/control_systems/pdf/ICSA-10-322-01.pdf · Patch
vupen.com/english/advisories/2010/3275 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free