Use-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified long strings that trigger heap memory corruption.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Clearscada | Aveva | 2005 (including) | 2005 (including) |
| Clearscada | Aveva | 2007 (including) | 2007 (including) |
| Clearscada | Aveva | 2009 (including) | 2009 (including) |