Skip to main content

Kingview CVE-2012-1819

CRITICAL
2012-05-02 cret@cert.org
9.3
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
9.3 CRITICAL
AV:N/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:C/I:C/A:C
Attack Vector
Network
Attack Complexity
M
Confidentiality
C
Integrity
C
Availability
C

Lifecycle Timeline

1
CVE Published
May 02, 2012 - 22:55 cve.org
CRITICAL 9.3

DescriptionCVE.org

Untrusted search path vulnerability in WellinTech KingView 6.53 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

AnalysisAI

Untrusted search path vulnerability in WellinTech KingView 6.53 allows local users to gain privileges via a Trojan horse DLL in the current working directory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable.

Technical ContextAI

Untrusted search path vulnerability in WellinTech KingView 6.53 allows local users to gain privileges via a Trojan horse DLL in the current working directory. Affected products include: Wellintech Kingview.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2012-4711 CRITICAL POC
10.0 Feb 15

Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView

CVE-2012-1831 CRITICAL POC
10.0 Jul 05

Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted p

CVE-2012-1830 CRITICAL POC
10.0 Jul 05

Stack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted

CVE-2013-6128 MEDIUM POC
5.8 Oct 25

The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 doe

CVE-2013-6127 MEDIUM POC
5.8 Oct 25

The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53

CVE-2012-1832 CRITICAL
10.0 Jul 05

WellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds r

CVE-2018-7471 HIGH
7.8 Feb 25

KingView 7.5SP1 has an integer overflow during stgopenstorage API read operations. Rated high severity (CVSS 7.8), this

CVE-2012-1977 HIGH
7.1 May 09

WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-depend

CVE-2012-2560 MEDIUM
5.0 Jul 05

Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a craf

CVE-2012-4899 LOW
2.1 Oct 10

WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to d

Share

CVE-2012-1819 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy