Back to CVE Browser

CVE-2011-1918

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0040%

EPSS Percentile31.69th

PublishedNov 2, 2011

Last ModifiedApr 29, 2026

Vulnerability Description

Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted TCP message traffic.

Affected Platforms (CPE)

📦

Ge

Intelligent Platforms Proficy Historian

<= 3.5

📦

Ge

Intelligent Platforms Proficy Historian

= 4.0

References & Advisories

🔗 http://ics-cert.us-cert.gov/advisories/ICSA-11-243-03A

🔗 http://www.securityfocus.com/bid/50475

🔗 http://www.us-cert.gov/control_systems/pdf/ICSA-11-243-03.pdf

🔗 http://ics-cert.us-cert.gov/advisories/ICSA-11-243-03A

🔗 http://www.securityfocus.com/bid/50475

🔗 http://www.us-cert.gov/control_systems/pdf/ICSA-11-243-03.pdf

Related Vulnerabilities

CVE-2012-022910.0

The Data Archiver service in GE Intelligent Platforms Proficy Historian 4.5 and earlier allows remote attackers to cause a denial ...

CVE-2012-25159.3

Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (...

CVE-2012-25169.3

An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Pr...

CVE-2011-33204.3

Cross-site scripting (XSS) vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and ...