CVE-2011-0406

N/A

Description

Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777.

CVE Details

CVSS v3.1 ScoreN/A

Published1/11/2011

Last Modified4/29/2026

Sourcenvd

Honeypot Sightings0

Affected Products

wellintech:kingview

Weaknesses (CWE)

CWE-119

References

http://osvdb.org/70366(cve@mitre.org)

http://secunia.com/advisories/42851(cve@mitre.org)

http://securityreason.com/securityalert/8134(cve@mitre.org)

http://thesauceofutterpwnage.blogspot.com/2011/01/waking-up-sleeping-dragon.html(cve@mitre.org)

http://www.cnnvd.org.cn/showCnnvd.html?id=2011010108(cve@mitre.org)

http://www.exploit-db.com/exploits/15957(cve@mitre.org)

http://www.kb.cert.org/vuls/id/180119(cve@mitre.org)

http://www.kingview.com/news/detail.aspx?contentid=528(cve@mitre.org)

http://www.securityfocus.com/bid/45727(cve@mitre.org)

http://www.vupen.com/english/advisories/2011/0063(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/64559(cve@mitre.org)

http://osvdb.org/70366(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/42851(af854a3a-2127-422b-91ae-364da2661108)

http://securityreason.com/securityalert/8134(af854a3a-2127-422b-91ae-364da2661108)

http://thesauceofutterpwnage.blogspot.com/2011/01/waking-up-sleeping-dragon.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.cnnvd.org.cn/showCnnvd.html?id=2011010108(af854a3a-2127-422b-91ae-364da2661108)

http://www.exploit-db.com/exploits/15957(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/180119(af854a3a-2127-422b-91ae-364da2661108)

http://www.kingview.com/news/detail.aspx?contentid=528(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/45727(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2011/0063(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/64559(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.