Description
A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior. A malicious HTML file that loads the ActiveX controls can trigger the vulnerability via unchecked function calls.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GE | GE Communicator | Communicator 3.15 and prior. | — |
Advisories 1
- ICSA-18-275-02 GE Communicator CISA ICS & IT advisories · Oct 2, 2018