critical10.0Public exploit code
CVE-2011-3488
Use-after-free vulnerability in Equis MetaStock 11 and earlier allows remote attackers to execute arbitrary code via a malformed (1) mwc chart, (2) mws chart, …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Equis MetaStock 11 - Use-After-Free2011-09-14 · dos · windows
Impact
Use-after-free vulnerability in Equis MetaStock 11 and earlier allows remote attackers to execute arbitrary code via a malformed (1) mwc chart, (2) mws chart, (3) mwt template, or (4) mwl layout.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Equis | Metastock | through 11.0 Versions 8.0, 9.0, 9.1, 9.2, 10.0 |