An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dereference a pointer within the program causing the application to become unavailable.
The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
The product dereferences a pointer that it expects to be valid but is NULL.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/101685 | vdb entry third party advisory |
https://ics-cert.us-cert.gov/advisories/ICSA-17-306-02 | third party advisory us government resource |