CVE-2014-9205

Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICROSYS PROMOTIC stable before 8.2.19 and PROMOTIC development before 8.3.2 allows remote attackers to execute arbitrary code by providing a large amount of data.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsys:promotic:*:*:*:*:stable:*:*:*
cpe:2.3:a:microsys:promotic:*:*:*:*:development:*:*:*

History

21 Nov 2024, 02:20

Type Values Removed Values Added
References () http://www.promotic.eu/en/pmdoc/News.htm - Vendor Advisory () http://www.promotic.eu/en/pmdoc/News.htm - Vendor Advisory
References () http://www.zerodayinitiative.com/advisories/ZDI-15-091/ - () http://www.zerodayinitiative.com/advisories/ZDI-15-091/ -
References () https://ics-cert.us-cert.gov/advisories/ICSA-15-062-01 - Third Party Advisory, US Government Resource () https://ics-cert.us-cert.gov/advisories/ICSA-15-062-01 - Third Party Advisory, US Government Resource

Information

Published : 2015-03-29 10:59

Updated : 2024-11-21 02:20


NVD link : CVE-2014-9205

Mitre link : CVE-2014-9205

CVE.ORG link : CVE-2014-9205


JSON object : View

Products Affected

microsys

  • promotic
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer