CVE-2007-1313 Memory corruption in n/a
Attackers can cause denial of service or execute arbitrary code via improper validation of OPC server handles in NETxAutomation NETxEIB.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Local or same network only
- Victim action needed
- Not stated
- Fix
- None listed
What is CVE-2007-1313?
CVE-2007-1313 is a high-severity memory corruption vulnerability in n/a, published on 21 Mar 2007. It can only be exploited from the same machine or local network.
Official description
NETxAutomation NETxEIB OPC Server before 3.0.1300 does not properly validate OLE for Process Control (OPC) server handles, which allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors involving the (1) IOPCSyncIO::Read, (2) IOPCSyncIO::Write, (3) IOPCServer::AddGroup, (4) IOPCServer::RemoveGroup, (5) IOPCCommon::SetClientName, and (6) IOPCGroupStateMgt::CloneGroup functions, which allow access to arbitrary memory. NOTE: the vectors might be limited to attackers with physical access.
Weakness: CWE-20
Which versions are affected by CVE-2007-1313?
It affects 1 product.
Products include Netxautomation Netxeib.
How do I fix CVE-2007-1313?
No fix has been published for CVE-2007-1313 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2007-1313 being exploited?
There is no known exploitation of CVE-2007-1313 in the wild and no public exploit code.
Sources
Also known as GHSA-2jv6-pf8r-vf3g.