Description (CNA)
dataSIMS Avionics ARINC 664-1 version 4.5.3 contains a local buffer overflow vulnerability that allows attackers to overwrite memory by manipulating the milstd1553result.txt file. Attackers can craft a malicious file with carefully constructed payload and alignment sections to potentially execute arbitrary code on the Windows system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Data Device Corporation / dataSIMS Avionics ARINC | affected 4.5.3 |
CWE
CWE-121
References
- https://www.exploit-db.com/exploits/49577
- https://www.ddc-web.com/
- https://www.ddc-web.com/en/connectivity/databus/milstd1553-1/software-1/bu-69414?partNumber=BU-69414
- https://www.vulncheck.com/advisories/datasims-avionics-arinc-local-buffer-overflow
ADP enrichment
No English description supplied.
No references supplied.