CVE-2011-4037 — HIGH (9.3) — White Hats Nepal

Q: How severe is CVE-2011-4037?

CVE-2011-4037 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2011-4037?

Check the references section above for vendor advisories and patch information. Affected products include: Sielcosistemi Winlog Lite, Sielcosistemi Winlog Pro.

Vulnerability Description

Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote attackers to execute arbitrary code via invalid data in unspecified fields of a project file.

CVSS Score

9.3

HIGH

AV:N/AC:M/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Sielcosistemi	Winlog Lite	<= 2.07.08
Sielcosistemi	Winlog Pro	<= 2.07.08

Related Weaknesses (CWE)

CWE-119

References

http://secunia.com/advisories/47078Vendor Advisory
http://securitytracker.com/id?1026388
http://www.us-cert.gov/control_systems/pdf/ICSA-11-298-01.pdfPatchUS Government Resource
http://secunia.com/advisories/47078Vendor Advisory
http://securitytracker.com/id?1026388
http://www.us-cert.gov/control_systems/pdf/ICSA-11-298-01.pdfPatchUS Government Resource

FAQ

What is CVE-2011-4037?

CVE-2011-4037 is a vulnerability with a CVSS score of 9.3 (HIGH). Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote attackers to execute arbitrary code via invalid data in unspecified fields of a p...

How severe is CVE-2011-4037?

CVE-2011-4037 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2011-4037?

Check the references section above for vendor advisories and patch information. Affected products include: Sielcosistemi Winlog Lite, Sielcosistemi Winlog Pro.