This host is installed with Sielco Sistemi Winlog PRO and is prone to buffer overflow vulnerability.

Successful exploitation will allow remote attackers to execute arbitrary code in the context of the application. Impact Level: System/Application

Upgrade to Winlog Lite version 2.07.09 or later, For updates refer to http://www.sielcosistemi.com/en/download/public/index.html

The flaw is due to an unspecified error when processing certain values in project files and can be exploited to cause a buffer overflow by tricking a user into loading a malicious project file.

Winlog Lite version before 2.07.09

• http://secunia.com/advisories/47078
• http://securitytracker.com/id?1026388
• http://www.us-cert.gov/control_systems/pdf/ICSA-11-298-01.pdf

---

Updated on 2015-03-25