CVE-2011-2089 Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x befo...
HighCVSS 9.3
EPSS 38.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in the argument. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iconics bizviz | = 9.0 | No fix listed |
| iconics bizviz | = 9.01 | No fix listed |
| iconics bizviz | = 9.1 | No fix listed |
| iconics bizviz | = 9.2 | No fix listed |
| iconics bizviz | = 9.13 | No fix listed |
| iconics bizviz | = 9.20 | No fix listed |
| iconics bizviz | = 9.21 | No fix listed |
| iconics genesis32 | = 9.0 | No fix listed |
| iconics genesis32 | = 9.1 | No fix listed |
| iconics genesis32 | = 9.01 | No fix listed |
| iconics genesis32 | = 9.2 | No fix listed |
| iconics genesis32 | = 9.13 | No fix listed |
| iconics genesis32 | = 9.20 | No fix listed |
| iconics genesis32 | = 9.21 | No fix listed |
References
- 44417 third-party-advisory vendor-advisory
- 17240 exploit
- 17269 exploit
- 72135 vdb-entry
- www.security-assessment.com exploit
- 47704 exploit vdb-entry
- www.us-cert.gov us-government-resource
- ADV-2011-1174 vdb-entry vendor-advisory
- webhmi-activex-bo(67267) vdb-entry