CVEvulnerability
CVE-2011-4870
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-01-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Multiple buffer overflows in the (1) GUIControls, (2) BatchObjSrv, and (3) BatchSecCtrl ActiveX controls in Invensys Wonderware InBatch 9.0 and 9.0 SP1, and InBatch 8.1 SP1, 9.0 SP2, and 9.5 Server and Runtime Clients, allow remote attackers to execute arbitrary code via a long string in a property value, a different issue than CVE-2011-3141.
Affected configurations
• invensys wonderware inbatch 8.1
• invensys wonderware inbatch 9.0
• invensys wonderware inbatch 9.5
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/51129 www.securityfocus.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-332-01A.pdf US Government Resource
- http://www.securityfocus.com/bid/51129 www.securityfocus.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-332-01A.pdf US Government Resource