Unscored severity · published Sep 2, 2011
CVE-2011-0342
Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute…
–
CVSS
5.9%
EPSS
No
On KEV
Description
Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the (1) Open, (2) Close, or (3) SetCurrentLanguage method.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.9% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WS
Web Studio · Indusoft
7.0b2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0342
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0342
ics-cert.us-cert.gov
http://ics-cert.us-cert.gov/advisories/ICSA-11-273-02
Vendor Advisory
http://secunia.com/advisories/44875
Vendor Advisory
http://secunia.com/secunia_research/2011-61/
www.indusoft.com
http://www.indusoft.com/hotfixes/hotfixes.php
www.securityfocus.com
http://www.securityfocus.com/bid/49403
More from Web Studio
9.8
CVE-2014-0780
InduSoft Web Studio Path Traversal
9.8
CVE-2018-8840
A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag,…
–
CVE-2015-7375
Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code or cause a denial of service (unhandled runtime exception and application…
–
CVE-2015-7374
The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649
–
CVE-2015-1009
Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage,…