Sign-up

ID

VAR-201102-0183


CVE

CVE-2010-4742


TITLE

Moxa ActiveX SDK Buffer Overflow Vulnerability

Trust: 1.0

sources: IVD: 443414a4-2355-11e6-abef-000c29c66e3d // IVD: 7d764e1f-463f-11e9-b4d5-000c29342cb1 // CNVD: CNVD-2011-0765

DESCRIPTION

Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value. Moxa is committed to the development and manufacture of information networking products, providing customers with cost-effective and stable serial communication solutions, serial device networking solutions, and industrial Ethernet solutions. Failed exploit attempts will result in a denial-of-service condition. Moxa ActiveX SDK 2.2.0.5 is vulnerable; other versions may also be affected

Trust: 2.88

sources: NVD: CVE-2010-4742 // JVNDB: JVNDB-2011-003961 // CNVD: CNVD-2011-0765 // BID: 46487 // IVD: 443414a4-2355-11e6-abef-000c29c66e3d // IVD: 7d764e1f-463f-11e9-b4d5-000c29342cb1 // VULHUB: VHN-47347

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 1.0

sources: IVD: 443414a4-2355-11e6-abef-000c29c66e3d // IVD: 7d764e1f-463f-11e9-b4d5-000c29342cb1 // CNVD: CNVD-2011-0765

AFFECTED PRODUCTS

vendor:moxamodel:activex sdkscope: - version: -

Trust: 2.0

vendor:moxamodel:activex sdkscope:eqversion:*

Trust: 1.0

vendor:activex sdkmodel: - scope:eqversion:*

Trust: 0.4

vendor:moxamodel:activex sdkscope:eqversion:2.2.0.5

Trust: 0.3

sources: IVD: 443414a4-2355-11e6-abef-000c29c66e3d // IVD: 7d764e1f-463f-11e9-b4d5-000c29342cb1 // CNVD: CNVD-2011-0765 // BID: 46487 // JVNDB: JVNDB-2011-003961 // CNNVD: CNNVD-201102-290 // NVD: CVE-2010-4742

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2010-4742
value: HIGH

Trust: 1.0

NVD: CVE-2010-4742
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201102-290
value: CRITICAL

Trust: 0.6

IVD: 443414a4-2355-11e6-abef-000c29c66e3d
value: CRITICAL

Trust: 0.2

IVD: 7d764e1f-463f-11e9-b4d5-000c29342cb1
value: CRITICAL

Trust: 0.2

VULHUB: VHN-47347
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2010-4742
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

IVD: 443414a4-2355-11e6-abef-000c29c66e3d
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

IVD: 7d764e1f-463f-11e9-b4d5-000c29342cb1
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

VULHUB: VHN-47347
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: IVD: 443414a4-2355-11e6-abef-000c29c66e3d // IVD: 7d764e1f-463f-11e9-b4d5-000c29342cb1 // VULHUB: VHN-47347 // JVNDB: JVNDB-2011-003961 // CNNVD: CNNVD-201102-290 // NVD: CVE-2010-4742

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.9

sources: VULHUB: VHN-47347 // JVNDB: JVNDB-2011-003961 // NVD: CVE-2010-4742

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201102-290

TYPE

Buffer overflow

Trust: 1.0

sources: IVD: 443414a4-2355-11e6-abef-000c29c66e3d // IVD: 7d764e1f-463f-11e9-b4d5-000c29342cb1 // CNNVD: CNNVD-201102-290

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2011-003961

EXPLOIT AVAILABILITY
sources:
            
            
            VULHUB: VHN-47347

PATCH
title:Top Pageurl:http://www.moxa.com/
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2011-003961

EXTERNAL IDS
db:NVDid:CVE-2010-4742
Trust: 3.8
db:OSVDBid:68986
Trust: 2.6
db:CNNVDid:CNNVD-201102-290
Trust: 1.1
db:CNVDid:CNVD-2011-0765
Trust: 1.0
db:JVNDBid:JVNDB-2011-003961
Trust: 0.8
db:BIDid:46487
Trust: 0.4
db:IVDid:443414A4-2355-11E6-ABEF-000C29C66E3D
Trust: 0.2
db:IVDid:7D764E1F-463F-11E9-B4D5-000C29342CB1
Trust: 0.2
db:EXPLOIT-DBid:16685
Trust: 0.1
db:VULHUBid:VHN-47347
Trust: 0.1
sources:
            
            
            IVD: 443414a4-2355-11e6-abef-000c29c66e3d // 
            
            
            
            IVD: 7d764e1f-463f-11e9-b4d5-000c29342cb1 // 
            
            
            
            CNVD: CNVD-2011-0765 // 
            
            
            
            VULHUB: VHN-47347 // 
            
            
            
            BID: 46487 // 
            
            
            
            JVNDB: JVNDB-2011-003961 // 
            
            
            
            CNNVD: CNNVD-201102-290 // 
            
            
            
            NVD: CVE-2010-4742

REFERENCES
url:http://www.metasploit.com/modules/exploit/windows/fileformat/moxa_mediadbplayback
Trust: 1.7
url:http://www.osvdb.org/68986
Trust: 1.7
url:http://reversemode.com/index.php?option=com_content&task=view&id=70&itemid=1
Trust: 1.6
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-4742
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-4742
Trust: 0.8
url:http://www.osvdb.org/68986http
Trust: 0.6
url:http://osvdb.org/68986
Trust: 0.3
url:http://support.microsoft.com/kb/240797
Trust: 0.3
url:http://www.moxa.com/product/product.aspx
Trust: 0.3
url:http://reversemode.com/index.php?option=com_content&task=view&id=70&itemid=1
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2011-0765 // 
            
            
            
            VULHUB: VHN-47347 // 
            
            
            
            BID: 46487 // 
            
            
            
            JVNDB: JVNDB-2011-003961 // 
            
            
            
            CNNVD: CNNVD-201102-290 // 
            
            
            
            NVD: CVE-2010-4742

CREDITS
MC - Metasploit
Trust: 0.3
sources:
            
            
            BID: 46487

SOURCES
db:IVDid:443414a4-2355-11e6-abef-000c29c66e3d
db:IVDid:7d764e1f-463f-11e9-b4d5-000c29342cb1
db:CNVDid:CNVD-2011-0765
db:VULHUBid:VHN-47347
db:BIDid:46487
db:JVNDBid:JVNDB-2011-003961
db:CNNVDid:CNNVD-201102-290
db:NVDid:CVE-2010-4742

LAST UPDATE DATE
2025-04-11T22:54:03.899000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2011-0765date:2011-02-24T00:00:00
db:VULHUBid:VHN-47347date:2011-04-26T00:00:00
db:BIDid:46487date:2010-10-19T00:00:00
db:JVNDBid:JVNDB-2011-003961date:2012-03-27T00:00:00
db:CNNVDid:CNNVD-201102-290date:2011-02-22T00:00:00
db:NVDid:CVE-2010-4742date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:IVDid:443414a4-2355-11e6-abef-000c29c66e3ddate:2011-02-24T00:00:00
db:IVDid:7d764e1f-463f-11e9-b4d5-000c29342cb1date:2011-02-24T00:00:00
db:CNVDid:CNVD-2011-0765date:2011-02-24T00:00:00
db:VULHUBid:VHN-47347date:2011-02-18T00:00:00
db:BIDid:46487date:2010-10-19T00:00:00
db:JVNDBid:JVNDB-2011-003961date:2012-03-27T00:00:00
db:CNNVDid:CNNVD-201102-290date:2011-02-21T00:00:00
db:NVDid:CVE-2010-4742date:2011-02-18T18:00:00.917