CVEvulnerability
CVE-2011-0340
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-05-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers to execute arbitrary code via a long (1) InternationalOrder, (2) InternationalSeparator, or (3) LogFileName property value; or (4) a long bstrFileName argument to the OpenScreen method.
Affected configurations
• advantech advantech studio 6.1
• indusoft thin client 7.0
• indusoft web studio (<= 7.0)
• indusoft web studio 6.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://ics-cert.us-cert.gov/advisories/ICSA-12-249-03 ics-cert.us-cert.gov
- http://secunia.com/advisories/42928 Vendor Advisory
- http://secunia.com/advisories/43116 Vendor Advisory
- http://secunia.com/secunia_research/2011-36/ Vendor Advisory
- http://secunia.com/secunia_research/2011-37/ Vendor Advisory
- http://www.advantechdirect.com/eMarketingPrograms/AStudio_Patch/AStudio7.0_Patch_Final.htm www.advantechdirect.com
- http://www.indusoft.com/hotfixes/hotfixes.php www.indusoft.com
- http://www.securityfocus.com/bid/47596 www.securityfocus.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-137-02.pdf www.us-cert.gov
- http://www.vupen.com/english/advisories/2011/1115 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/1116 Vendor Advisory
- http://ics-cert.us-cert.gov/advisories/ICSA-12-249-03 ics-cert.us-cert.gov
- http://secunia.com/advisories/42928 Vendor Advisory
- http://secunia.com/advisories/43116 Vendor Advisory
- http://secunia.com/secunia_research/2011-36/ Vendor Advisory
- http://secunia.com/secunia_research/2011-37/ Vendor Advisory
- http://www.advantechdirect.com/eMarketingPrograms/AStudio_Patch/AStudio7.0_Patch_Final.htm www.advantechdirect.com
- http://www.indusoft.com/hotfixes/hotfixes.php www.indusoft.com
- http://www.securityfocus.com/bid/47596 www.securityfocus.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-137-02.pdf www.us-cert.gov
- http://www.vupen.com/english/advisories/2011/1115 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/1116 Vendor Advisory