CVE-2011-3142
WellinTech KingView 6.52-6.53 - Remote Code Execution via KVWebSvr.dll ValidateUser Method
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-3142. PoCs published by Carlos Mario Penagos Hollmann.
AI-analyzed exploit summary This exploit targets a heap-based buffer overflow in KingView 6.5.3 SCADA ActiveX control (KVWebSvr.dll) via the ValidateUser method. It uses a crafted payload with SEH overwrite to achieve remote code execution, spawning calc.exe as a demonstration.
Description
Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote attackers to execute arbitrary code via a long second argument to the ValidateUser method.
Exploits (1)
This exploit targets a heap-based buffer overflow in KingView 6.5.3 SCADA ActiveX control (KVWebSvr.dll) via the ValidateUser method. It uses a crafted payload with SEH overwrite to achieve remote code execution, spawning calc.exe as a demonstration.