CVE-2011-4520 Heap-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause a denial of service via a crafted web page.
MediumCVSS 4.3
EPSS 2.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Heap-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause a denial of service via a crafted web page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsys promotic | <= 8.1.4 | No fix listed |
| microsys promotic | = 8.0.0 | No fix listed |
| microsys promotic | = 8.0.1 | No fix listed |
| microsys promotic | = 8.0.2 | No fix listed |
| microsys promotic | = 8.0.3 | No fix listed |
| microsys promotic | = 8.0.4 | No fix listed |
| microsys promotic | = 8.0.5 | No fix listed |
| microsys promotic | = 8.0.6 | No fix listed |
| microsys promotic | = 8.0.7 | No fix listed |
| microsys promotic | = 8.0.8 | No fix listed |
| microsys promotic | = 8.0.9 | No fix listed |
| microsys promotic | = 8.0.10 | No fix listed |
| microsys promotic | = 8.0.11 | No fix listed |
| microsys promotic | = 8.0.12 | No fix listed |
| microsys promotic | = 8.0.13 | No fix listed |
| microsys promotic | = 8.1.0 | No fix listed |
| microsys promotic | = 8.1.1 | No fix listed |
| microsys promotic | = 8.1.2 | No fix listed |
| microsys promotic | = 8.1.3 | No fix listed |
References
- ics-cert.us-cert.gov us-government-resource
- www.promotic.eu