CVE-2011-2217: Buffer Overflow
Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build 230598 and 2.5 before Build 204931 in VMware Infrastructure 3, do not properly handle attempted initialization within Internet Explorer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HTML document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2217?
CVE-2011-2217 is considered a critical vulnerability due to potential exploitation leading to arbitrary code execution.
How do I fix CVE-2011-2217?
To fix CVE-2011-2217, upgrade to the latest version of Tom Sawyer Get Extension Factory and VMware Infrastructure Client that are patched against this vulnerability.
What systems are affected by CVE-2011-2217?
CVE-2011-2217 affects Tom Sawyer GET Extension Factory version 5.5.2.237 and VMware Virtual Infrastructure Client versions 2.0.2 and 2.5.
What kind of attacks can be executed due to CVE-2011-2217?
Exploitation of CVE-2011-2217 can allow an attacker to execute arbitrary code on the affected systems.
Is CVE-2011-2217 a zero-day vulnerability?
CVE-2011-2217 is not a zero-day vulnerability as it was disclosed publicly and patches are available.