CVE-2011-0406

Wellintech Kingview - Memory Corruption

Title source: rule
STIX 2.1

Description

Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Dillon Beresford · pythonremotewindows
https://www.exploit-db.com/exploits/15957

References (11)

Core 11
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/64559
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/15957
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/45727
Various Sources x_refsource_misc
http://www.cnnvd.org.cn/showCnnvd.html?id=2011010108
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/42851
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/70366
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8134
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0063
Various Sources x_refsource_confirm
http://www.kingview.com/news/detail.aspx?contentid=528
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/180119

Scores

EPSS 0.5574
EPSS Percentile 98.1%

Details

CWE
CWE-119
Status published
Products (1)
wellintech/kingview 6.53
Published Jan 11, 2011
Tracked Since Feb 18, 2026