CVEvulnerability
CVE-2011-2089
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-05-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in the argument. NOTE: some of these details are obtained from third party information.
Affected configurations
• iconics bizviz 9.0
• iconics bizviz 9.01
• iconics bizviz 9.1
• iconics bizviz 9.2
• iconics bizviz 9.13
• iconics bizviz 9.20
• iconics bizviz 9.21
• iconics genesis32 9.0
• iconics genesis32 9.1
• iconics genesis32 9.01
• iconics genesis32 9.2
• iconics genesis32 9.13
• iconics genesis32 9.20
• iconics genesis32 9.21
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/44417 Vendor Advisory
- http://www.exploit-db.com/exploits/17240 Exploit
- http://www.exploit-db.com/exploits/17269 Exploit
- http://www.osvdb.org/72135 www.osvdb.org
- http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdf Exploit
- http://www.securityfocus.com/bid/47704 Exploit
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdf US Government Resource
- http://www.vupen.com/english/advisories/2011/1174 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67267 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/44417 Vendor Advisory
- http://www.exploit-db.com/exploits/17240 Exploit
- http://www.exploit-db.com/exploits/17269 Exploit
- http://www.osvdb.org/72135 www.osvdb.org
- http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdf Exploit
- http://www.securityfocus.com/bid/47704 Exploit
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdf US Government Resource
- http://www.vupen.com/english/advisories/2011/1174 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67267 exchange.xforce.ibmcloud.com