CVE-2012-3008 - Floral Rag

Description

Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items.

Reference

http://www.us-cert.gov/control_systems/pdf/ICSA-12-201-01.pdf https://exchange.xforce.ibmcloud.com/vulnerabilities/77131 http://www.securityfocus.com/bid/54609 http://secunia.com/advisories/49986 http://osvdb.org/84091