NVD

Id
7431  
Name
CVE-2011-0340  
Description
Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers to execute arbitrary code via a long (1) InternationalOrder, (2) InternationalSeparator, or (3) LogFileName property value; or (4) a long bstrFileName argument to the OpenScreen method.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-05-04  
Modified Date
2013-05-20  
Seq
2011-0340  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
41831 7431 CVE-2011-0340 http://ics-cert.us-cert.gov/advisories/ICSA-12-249-03  View
41832 7431 CVE-2011-0340 http://www.advantechdirect.com/eMarketingPrograms/AStudio_Patch/AStudio7.0_Patch_Final.htm  View
41833 7431 CVE-2011-0340 http://www.indusoft.com/hotfixes/hotfixes.php  View
41834 7431 CVE-2011-0340 47596  View
41835 7431 CVE-2011-0340 http://www.us-cert.gov/control_systems/pdf/ICSA-12-137-02.pdf  View
41836 7431 CVE-2011-0340 ADV-2011-1115  View
41837 7431 CVE-2011-0340 ADV-2011-1116  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33848 JVNDB-2011-004090 ISSymbol 仮想マシンの ISSymbol ActiveX コントロールにおけるバッファオーバーフローの脆弱性 Advantech Studio、InduSoft Web Studio、および InduSoft Thin Client でディストリービューションされている ISSymbol 仮想マシンの ISSymbol.ocx のISSymbol ActiveX コントロールには、バッファオーバーフローの脆弱性が存在します。 CVE-2011-0340 48247 CVE-2011-0340 7431 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004090.html 2011-05-04 2016-04-06 View