CVE-2011-0342 Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a l...
HighCVSS 10.0
EPSS 5.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the (1) Open, (2) Close, or (3) SetCurrentLanguage method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| indusoft web studio | = 7.0b2-hotfix7.0.01.04 | No fix listed |
References
- ics-cert.us-cert.gov
- 44875 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- www.indusoft.com
- 49403 vdb-entry