CVE-2011-2960

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted URL.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/45033Vendor Advisory
http://securitytracker.com/id?1025672
http://www.cnvd.org.cn/vulnerability/CNVD-2011-05347
http://www.osvdb.org/73124
http://www.sunwayland.com.cn/news_info_.asp?Nid=3593Vendor Advisory
http://www.us-cert.gov/control_systems/pdf/ICSA-11-167-01.pdfUS Government Resource
http://secunia.com/advisories/45033Vendor Advisory
http://securitytracker.com/id?1025672
http://www.cnvd.org.cn/vulnerability/CNVD-2011-05347
http://www.osvdb.org/73124
http://www.sunwayland.com.cn/news_info_.asp?Nid=3593Vendor Advisory
http://www.us-cert.gov/control_systems/pdf/ICSA-11-167-01.pdfUS Government Resource

Timeline

Published: Jul 29, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-296110.0Heap-based buffer overflow in AngelServer.exe 6.0.11.3 in Sunway pNetPower allows remote attackers to cause a denial of service (crash) and CVE-2011-29629.3Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a deni CVE-2011-296310.0TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote att CVE-2011-29646.8foomaticrip.c in foomatic-rip in foomatic-filters in Foomatic 4.0.6 allows remote attackers to execute arbitrary code via a crafted *Foomati CVE-2011-29756.8Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a CVE-2011-29764.3Cross-site scripting (XSS) vulnerability in Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, and 3.4.x before 3.4.12 allows remote atta CVE-2011-29772.1Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary files associated wit CVE-2011-29785.0Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x b CVE-2011-29795.0Bugzilla 4.1.x before 4.1.3 generates different responses for certain assignee queries depending on whether the group name is valid, which a CVE-2011-29807.2Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12,CVE-2011-29819.3The event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other produ CVE-2011-298210.0Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonke