First published: Fri Sep 02 2011(Updated: )
Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the (1) Open, (2) Close, or (3) SetCurrentLanguage method.
Credit: PSIRT-CNA@flexerasoftware.com
Affected Software | Affected Version | How to fix |
---|---|---|
InduSoft Web Studio | =7.0b2-hotfix7.0.01.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-0342 is rated as a critical vulnerability due to its ability to allow remote code execution.
To resolve CVE-2011-0342, update to a secure version of InduSoft Web Studio that addresses this vulnerability.
CVE-2011-0342 can be exploited through crafted input parameters in the Open, Close, or SetCurrentLanguage methods.
CVE-2011-0342 affects InduSoft Web Studio version 7.0B2 hotfix 7.0.01.04.
If exploited, CVE-2011-0342 can allow an attacker to execute arbitrary code on the affected system.