critical10.0
CVE-2011-0342
Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote at…
Impact
Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the (1) Open, (2) Close, or (3) SetCurrentLanguage method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Indusoft | Web Studio | Version 7.0b2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://ics-cert.us-cert.gov/advisories/ICSA-11-273-02
- http://secunia.com/advisories/44875
- http://secunia.com/secunia_research/2011-61/
- http://www.indusoft.com/hotfixes/hotfixes.php
- http://www.securityfocus.com/bid/49403
- http://ics-cert.us-cert.gov/advisories/ICSA-11-273-02
- http://secunia.com/advisories/44875
- http://secunia.com/secunia_research/2011-61/
- http://www.indusoft.com/hotfixes/hotfixes.php
- http://www.securityfocus.com/bid/49403