CVE-2015-7918

Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedName, (3) DefinedNameLocal, (4) ODBCPrepareEx, (5) ObjCreatePolygon, (6) SetTabbedTextEx, or (7) SetValidationRule method, a different vulnerability than CVE-2015-8561.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01	Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-15-634
http://www.zerodayinitiative.com/advisories/ZDI-15-631
http://www.zerodayinitiative.com/advisories/ZDI-15-625
http://www.zerodayinitiative.com/advisories/ZDI-15-635
https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02	Third Party Advisory US Government Resource
http://www.zerodayinitiative.com/advisories/ZDI-15-630
http://www.zerodayinitiative.com/advisories/ZDI-15-632
http://www.zerodayinitiative.com/advisories/ZDI-15-633

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:schneider-electric:proclima:*:*:*:*:*:*:*:*

Information

Published : 2015-12-14 21:59

Updated : 2015-12-16 05:21

NVD link : CVE-2015-7918

Mitre link : CVE-2015-7918

JSON object : View

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Advertisement

Products Affected

schneider-electric

proclima

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01", "name": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-634", "name": "http://www.zerodayinitiative.com/advisories/ZDI-15-634", "tags": [], "refsource": "MISC"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-631", "name": "http://www.zerodayinitiative.com/advisories/ZDI-15-631", "tags": [], "refsource": "MISC"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-625", "name": "http://www.zerodayinitiative.com/advisories/ZDI-15-625", "tags": [], "refsource": "MISC"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-635", "name": "http://www.zerodayinitiative.com/advisories/ZDI-15-635", "tags": [], "refsource": "MISC"}, {"url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02", "name": "https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02", "tags": ["Third Party Advisory", "US Government Resource"], "refsource": "MISC"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-630", "name": "http://www.zerodayinitiative.com/advisories/ZDI-15-630", "tags": [], "refsource": "MISC"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-632", "name": "http://www.zerodayinitiative.com/advisories/ZDI-15-632", "tags": [], "refsource": "MISC"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-633", "name": "http://www.zerodayinitiative.com/advisories/ZDI-15-633", "tags": [], "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedName, (3) DefinedNameLocal, (4) ODBCPrepareEx, (5) ObjCreatePolygon, (6) SetTabbedTextEx, or (7) SetValidationRule method, a different vulnerability than CVE-2015-8561."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-119"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2015-7918", "ASSIGNER": "ics-cert@hq.dhs.gov"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2015-12-15T05:59Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:schneider-electric:proclima:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "6.1"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2015-12-16T13:21Z"}