1. CVE-Search
  2. CVE-2011-4874
ID CVE-2011-4874
Summary Use-after-free vulnerability in MICROSYS PROMOTIC before 8.1.7 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (data corruption and application crash) via a crafted project (aka .pra) file.
References
Vulnerable Configurations
  • cpe:2.3:a:microsys:promotic:8.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.0.8:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.0.9:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.0.10:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.0.11:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.0.12:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.0.12:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.0.13:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.0.13:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:microsys:promotic:8.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:microsys:promotic:8.1.5:*:*:*:*:*:*:*
CVSS
Base: 7.9 (as of 29-08-2017 - 01:30)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
ADJACENT_NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:A/AC:M/Au:N/C:C/I:C/A:C
refmap via4
bid 52988
confirm http://www.promotic.eu/en/pmdoc/News.htm#ver80107
misc http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-03.pdf
xf promotic-project-file-code-exec(74846)
Last major update 29-08-2017 - 01:30
Published 13-04-2012 - 10:41
Last modified 29-08-2017 - 01:30
Back to Top