CVE:CVE-2012-0254
CNNVD:CNNVD-201209-146
Honeywell是一家著名的美国安防产品公司，Ademco是其防盗报警产品之一。
Honeywell Process Solutions (HPS) Experion R2xx、R30x、R31x、R400.x，Honeywell Building Solutions (HBS) Enterprise Building Manager R400和R410.1，Honeywell Environmental Combustion和Controls (ECC) SymmetrE R410.1版本中的HMIWeb Browser HSCDSPRenderDLL ActiveX控件中存在基于栈的缓冲区溢出漏洞。远程攻击者可利用该漏洞通过未明向量执行任意代码。
solution:Upgrade honeywell enterprise_building_manager to a higher version than r400,r410.1,and avoid the version r400,r410.1; Upgrade honeywell experion to a higher version than r200,r300,r310,r400.0,and avoid the version r200,r300,r310,r400.0; Upgrade honeywell symmetre to a higher version than r410.1,and avoid the version r410.1