Unscored severity · published May 4, 2011
CVE-2011-0340
Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6…
–
CVSS
32.3%
EPSS
No
On KEV
Description
Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers to execute arbitrary code via a long (1) InternationalOrder, (2) InternationalSeparator, or (3) LogFileName property value; or (4) a long bstrFileName argument to the OpenScreen method.
Exploitation
Is it being used?
Exploit prediction (EPSS)32.3% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Advantech Studio · Advantech
6.1 · source: NVD
TC
Thin Client · Indusoft
7.0 · source: NVD
WS
Web Studio · Indusoft
through 7.0; 6.1; 6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0340
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0340
ics-cert.us-cert.gov
http://ics-cert.us-cert.gov/advisories/ICSA-12-249-03
Vendor Advisory
http://secunia.com/advisories/42928
Vendor Advisory
http://secunia.com/advisories/43116
Vendor Advisory
http://secunia.com/secunia_research/2011-36/
Vendor Advisory
http://secunia.com/secunia_research/2011-37/
www.advantechdirect.com
http://www.advantechdirect.com/eMarketingPrograms/AStudio_Patch/AStudio7.0_Patch_Final.htm
More from Advantech Studio
–
CVE-2013-1627
Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files…
–
CVE-2011-0488
Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote…