Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows user-assisted remote attackers to execute arbitrary code via a malformed file that triggers a write access violation.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dream_report | Dreamreport | 3.21 | 3.21 |
| Dream_report | Dreamreport | 3.41 | 3.41 |
| Dream_report | Dreamreport | 3.42 | 3.42 |
| Dream_report | Dreamreport | * | 3.43 |
| Wonderware_hmi_reports | Invensys | * | 3.42.835.0304 |