CVE:CVE-2012-1801
CNNVD:CNNVD-201204-021
ABB是位居全球500强之列的电力和自动化技术领域的领导厂商。
多个ABB产品中存在远程缓冲区溢出漏洞，该漏洞源于对用户提供的数据未执行正确的边界检查。攻击者可利用该漏洞在使用有漏洞控件（典型Internet Explorer）的应用程序上下文中执行任意代码。以下ABB产品受影响：WebWare Server、WebWare SDK、ABB Interlink Module、S4 OPC Server、QuickTeach、RobotStudio S4和RobotStudio Lite。
solution:Upgrade abb interlink_module to a higher version than -; Upgrade abb quickteach to a higher version than -; Upgrade abb robotstudio_lite to a higher version than -; Upgrade abb robotstudio_s4 to a higher version than -; Upgrade abb s4_opc_server to a higher version than -; Upgrade abb webware_sdk to a higher version than -; Upgrade abb webware_server to a higher version than -