Stack-Based Buffer Overflow in WellinTech KingView ActiveX Control

CVE-2011-3142

Summary

A stack-based buffer overflow vulnerability exists in an ActiveX control within the KVWebSvr.dll file in WellinTech's KingView versions 6.52 and 6.53. This flaw can be exploited by remote attackers to execute arbitrary code on the affected system. Specifically, the vulnerability arises from inadequate validation of input passed to the ValidateUser method, whereby an excessively long second argument can lead to memory corruption. This exposes organizations using KingView to significant security risks, making it critical to apply appropriate patches and mitigations against this exploit.

References