VAR-201512-0015

Vulnerability from variot - Updated: 2025-04-13 23:31

Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedName, (3) DefinedNameLocal, (4) ODBCPrepareEx, (5) ObjCreatePolygon, (6) SetTabbedTextEx, or (7) SetValidationRule method, a different vulnerability than CVE-2015-8561. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the implementation of the DefinedName method. Memory corruption occurs when a long user-supplied name is supplied. Later in processing, the code jumps to an address outside of normal flow. An attacker may be able to leverage this flaw to execute code under the context of the process. A buffer overrun occurs when a long string is passed by the user to the method. Schneider Electric ProClima is a thermal calculation software from Schneider Electric, France. Failed exploit attempts will likely cause a denial-of-service condition. The affected ActiveX control is identified by CLSID: 3D6F2DBA-F4E5-40A6-8725-E99BC96CC23A

Show details on source website

{
  "affected_products": {
    "_id": null,
    "data": [
      {
        "_id": null,
        "model": "proclima",
        "scope": null,
        "trust": 4.9,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "_id": null,
        "model": "proclima",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": "6.1"
      },
      {
        "_id": null,
        "model": "proclima",
        "scope": "eq",
        "trust": 0.9,
        "vendor": "schneider electric",
        "version": "6.1"
      },
      {
        "_id": null,
        "model": "proclima",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "schneider electric",
        "version": "6.2"
      },
      {
        "_id": null,
        "model": "electric proclima",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "schneider",
        "version": "6.1"
      },
      {
        "_id": null,
        "model": "proclima",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "6.0.1"
      },
      {
        "_id": null,
        "model": "proclima",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "6.0"
      },
      {
        "_id": null,
        "model": "proclima",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "6.2"
      },
      {
        "_id": null,
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "proclima",
        "version": "*"
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "6d683610-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-635"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-634"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-632"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-630"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-625"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-633"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-631"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-07899"
      },
      {
        "db": "BID",
        "id": "78421"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006424"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201512-005"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-7918"
      }
    ]
  },
  "configurations": {
    "_id": null,
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:schneider_electric:proclima",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006424"
      }
    ]
  },
  "credits": {
    "_id": null,
    "data": "Fritz Sands - HP Zero Day Initiative",
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-15-635"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-634"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-632"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-630"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-625"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-633"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-631"
      }
    ],
    "trust": 4.9
  },
  "cve": "CVE-2015-7918",
  "cvss": {
    "_id": null,
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "CVE-2015-7918",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 6.7,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "author": "CNVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.0,
            "id": "CNVD-2015-07899",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "author": "IVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.0,
            "id": "6d683610-2351-11e6-abef-000c29c66e3d",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.2,
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "version": "2.9 [IVD]"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "VHN-85879",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "ZDI",
            "id": "CVE-2015-7918",
            "trust": 4.9,
            "value": "MEDIUM"
          },
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2015-7918",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2015-7918",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2015-07899",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201512-005",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "IVD",
            "id": "6d683610-2351-11e6-abef-000c29c66e3d",
            "trust": 0.2,
            "value": "MEDIUM"
          },
          {
            "author": "VULHUB",
            "id": "VHN-85879",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "6d683610-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-635"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-634"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-632"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-630"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-625"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-633"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-631"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-07899"
      },
      {
        "db": "VULHUB",
        "id": "VHN-85879"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006424"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201512-005"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-7918"
      }
    ]
  },
  "description": {
    "_id": null,
    "data": "Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedName, (3) DefinedNameLocal, (4) ODBCPrepareEx, (5) ObjCreatePolygon, (6) SetTabbedTextEx, or (7) SetValidationRule method, a different vulnerability than CVE-2015-8561. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the implementation of the DefinedName method.  Memory corruption occurs when a long user-supplied name is supplied.  Later in processing, the code jumps to an address outside of normal flow.  An attacker may be able to leverage this flaw to execute code under the context of the process. A buffer overrun occurs when a long string is passed by the user to the method. Schneider Electric ProClima is a thermal calculation software from Schneider Electric, France. Failed exploit  attempts will likely cause a  denial-of-service condition. \nThe affected ActiveX control is identified by CLSID: 3D6F2DBA-F4E5-40A6-8725-E99BC96CC23A",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2015-7918"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006424"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-635"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-634"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-632"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-630"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-625"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-633"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-631"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-07899"
      },
      {
        "db": "BID",
        "id": "78421"
      },
      {
        "db": "IVD",
        "id": "6d683610-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "VULHUB",
        "id": "VHN-85879"
      }
    ],
    "trust": 7.11
  },
  "external_ids": {
    "_id": null,
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2015-7918",
        "trust": 8.5
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-15-335-02",
        "trust": 3.1
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-635",
        "trust": 2.4
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-634",
        "trust": 2.4
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-632",
        "trust": 2.4
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-630",
        "trust": 2.4
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-625",
        "trust": 2.4
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-633",
        "trust": 2.4
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-631",
        "trust": 2.4
      },
      {
        "db": "SCHNEIDER",
        "id": "SEVD-2015-329-01",
        "trust": 1.7
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201512-005",
        "trust": 0.9
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-07899",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006424",
        "trust": 0.8
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-3095",
        "trust": 0.7
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-3093",
        "trust": 0.7
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-3078",
        "trust": 0.7
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-3076",
        "trust": 0.7
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-3094",
        "trust": 0.7
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-3092",
        "trust": 0.7
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-3077",
        "trust": 0.7
      },
      {
        "db": "BID",
        "id": "78421",
        "trust": 0.4
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-626",
        "trust": 0.3
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-628",
        "trust": 0.3
      },
      {
        "db": "IVD",
        "id": "6D683610-2351-11E6-ABEF-000C29C66E3D",
        "trust": 0.2
      },
      {
        "db": "VULHUB",
        "id": "VHN-85879",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "6d683610-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-635"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-634"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-632"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-630"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-625"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-633"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-631"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-07899"
      },
      {
        "db": "VULHUB",
        "id": "VHN-85879"
      },
      {
        "db": "BID",
        "id": "78421"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006424"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201512-005"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-7918"
      }
    ]
  },
  "id": "VAR-201512-0015",
  "iot": {
    "_id": null,
    "data": true,
    "sources": [
      {
        "db": "IVD",
        "id": "6d683610-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-07899"
      },
      {
        "db": "VULHUB",
        "id": "VHN-85879"
      }
    ],
    "trust": 1.9
  },
  "iot_taxonomy": {
    "_id": null,
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "6d683610-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-07899"
      }
    ]
  },
  "last_update_date": "2025-04-13T23:31:32.998000Z",
  "patch": {
    "_id": null,
    "data": [
      {
        "title": "Schneider Electric has issued an update to correct this vulnerability.",
        "trust": 4.9,
        "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02"
      },
      {
        "title": "SEVD-2015-329-01",
        "trust": 0.8,
        "url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01"
      },
      {
        "title": "Schneider Electric ProClima ActiveX Control code injection vulnerability patch",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/67570"
      },
      {
        "title": "Schneider Electric ProClima F1BookView ActiveX Fixes for Control Buffer Overflow Vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=58873"
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-15-635"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-634"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-632"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-630"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-625"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-633"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-631"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-07899"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006424"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201512-005"
      }
    ]
  },
  "problemtype_data": {
    "_id": null,
    "data": [
      {
        "problemtype": "CWE-119",
        "trust": 1.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-85879"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006424"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-7918"
      }
    ]
  },
  "references": {
    "_id": null,
    "data": [
      {
        "trust": 8.0,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-15-335-02"
      },
      {
        "trust": 1.7,
        "url": "http://download.schneider-electric.com/files?p_doc_ref=sevd-2015-329-01"
      },
      {
        "trust": 1.7,
        "url": "http://www.zerodayinitiative.com/advisories/zdi-15-625"
      },
      {
        "trust": 1.7,
        "url": "http://www.zerodayinitiative.com/advisories/zdi-15-630"
      },
      {
        "trust": 1.7,
        "url": "http://www.zerodayinitiative.com/advisories/zdi-15-631"
      },
      {
        "trust": 1.7,
        "url": "http://www.zerodayinitiative.com/advisories/zdi-15-632"
      },
      {
        "trust": 1.7,
        "url": "http://www.zerodayinitiative.com/advisories/zdi-15-633"
      },
      {
        "trust": 1.7,
        "url": "http://www.zerodayinitiative.com/advisories/zdi-15-634"
      },
      {
        "trust": 1.7,
        "url": "http://www.zerodayinitiative.com/advisories/zdi-15-635"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7918"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-7918"
      },
      {
        "trust": 0.3,
        "url": "http://support.microsoft.com/kb/240797"
      },
      {
        "trust": 0.3,
        "url": "http://www.schneider-electric.com/en/product-range-download/2560-proclima"
      },
      {
        "trust": 0.3,
        "url": " http://www.zerodayinitiative.com/advisories/zdi-15-626"
      },
      {
        "trust": 0.3,
        "url": "http://www.zerodayinitiative.com/advisories/zdi-15-628"
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-15-635"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-634"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-632"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-630"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-625"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-633"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-631"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-07899"
      },
      {
        "db": "VULHUB",
        "id": "VHN-85879"
      },
      {
        "db": "BID",
        "id": "78421"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006424"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201512-005"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-7918"
      }
    ]
  },
  "sources": {
    "_id": null,
    "data": [
      {
        "db": "IVD",
        "id": "6d683610-2351-11e6-abef-000c29c66e3d",
        "ident": null
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-635",
        "ident": null
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-634",
        "ident": null
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-632",
        "ident": null
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-630",
        "ident": null
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-625",
        "ident": null
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-633",
        "ident": null
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-631",
        "ident": null
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-07899",
        "ident": null
      },
      {
        "db": "VULHUB",
        "id": "VHN-85879",
        "ident": null
      },
      {
        "db": "BID",
        "id": "78421",
        "ident": null
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006424",
        "ident": null
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201512-005",
        "ident": null
      },
      {
        "db": "NVD",
        "id": "CVE-2015-7918",
        "ident": null
      }
    ]
  },
  "sources_release_date": {
    "_id": null,
    "data": [
      {
        "date": "2015-12-03T00:00:00",
        "db": "IVD",
        "id": "6d683610-2351-11e6-abef-000c29c66e3d",
        "ident": null
      },
      {
        "date": "2015-12-08T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-635",
        "ident": null
      },
      {
        "date": "2015-12-08T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-634",
        "ident": null
      },
      {
        "date": "2015-12-08T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-632",
        "ident": null
      },
      {
        "date": "2015-12-08T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-630",
        "ident": null
      },
      {
        "date": "2015-12-08T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-625",
        "ident": null
      },
      {
        "date": "2015-12-08T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-633",
        "ident": null
      },
      {
        "date": "2015-12-08T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-631",
        "ident": null
      },
      {
        "date": "2015-12-03T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2015-07899",
        "ident": null
      },
      {
        "date": "2015-12-15T00:00:00",
        "db": "VULHUB",
        "id": "VHN-85879",
        "ident": null
      },
      {
        "date": "2015-12-01T00:00:00",
        "db": "BID",
        "id": "78421",
        "ident": null
      },
      {
        "date": "2015-12-17T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-006424",
        "ident": null
      },
      {
        "date": "2015-12-02T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201512-005",
        "ident": null
      },
      {
        "date": "2015-12-15T05:59:08.857000",
        "db": "NVD",
        "id": "CVE-2015-7918",
        "ident": null
      }
    ]
  },
  "sources_update_date": {
    "_id": null,
    "data": [
      {
        "date": "2015-12-08T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-635",
        "ident": null
      },
      {
        "date": "2015-12-08T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-634",
        "ident": null
      },
      {
        "date": "2015-12-08T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-632",
        "ident": null
      },
      {
        "date": "2015-12-08T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-630",
        "ident": null
      },
      {
        "date": "2015-12-08T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-625",
        "ident": null
      },
      {
        "date": "2015-12-08T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-633",
        "ident": null
      },
      {
        "date": "2015-12-08T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-631",
        "ident": null
      },
      {
        "date": "2015-12-03T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2015-07899",
        "ident": null
      },
      {
        "date": "2015-12-16T00:00:00",
        "db": "VULHUB",
        "id": "VHN-85879",
        "ident": null
      },
      {
        "date": "2015-12-01T00:00:00",
        "db": "BID",
        "id": "78421",
        "ident": null
      },
      {
        "date": "2015-12-17T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-006424",
        "ident": null
      },
      {
        "date": "2015-12-16T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201512-005",
        "ident": null
      },
      {
        "date": "2025-04-12T10:46:40.837000",
        "db": "NVD",
        "id": "CVE-2015-7918",
        "ident": null
      }
    ]
  },
  "threat_type": {
    "_id": null,
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201512-005"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "_id": null,
    "data": "Schneider Electric ProClima ActiveX Control Code injection vulnerability",
    "sources": [
      {
        "db": "IVD",
        "id": "6d683610-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-07899"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "_id": null,
    "data": "Buffer overflow",
    "sources": [
      {
        "db": "IVD",
        "id": "6d683610-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201512-005"
      }
    ],
    "trust": 0.8
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…