Description
Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted URL.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Dillon Beresford · textremotewindows
https://www.exploit-db.com/exploits/35864
References (6)
Core 6
Core References
US Government Resource x_refsource_misc
http://www.us-cert.gov/control_systems/pdf/ICSA-11-167-01.pdf
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1025672
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/45033
Vendor Advisory x_refsource_confirm
http://www.sunwayland.com.cn/news_info_.asp?Nid=3593
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/73124
Various Sources x_refsource_misc
http://www.cnvd.org.cn/vulnerability/CNVD-2011-05347
Scores
EPSS
0.3140
EPSS Percentile
96.8%
Details
CWE
CWE-119
Status
published
Products (1)
sunwayland/forcecontrol
6.1 sp1 (3 CPE variants)
Published
Jul 29, 2011
Tracked Since
Feb 18, 2026