CVE-2011-4870: Buffer Overflow
Multiple buffer overflows in the (1) GUIControls, (2) BatchObjSrv, and (3) BatchSecCtrl ActiveX controls in Invensys Wonderware InBatch 9.0 and 9.0 SP1, and InBatch 8.1 SP1, 9.0 SP2, and 9.5 Server and Runtime Clients, allow remote attackers to execute arbitrary code via a long string in a property value, a different issue than CVE-2011-3141.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4870?
CVE-2011-4870 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2011-4870?
To fix CVE-2011-4870, update to the latest version of Invensys Wonderware InBatch that addresses the buffer overflow issues.
Which versions of Invensys Wonderware InBatch are affected by CVE-2011-4870?
CVE-2011-4870 affects Invensys Wonderware InBatch versions 8.1 SP1, 9.0, 9.0 SP1, 9.0 SP2, and 9.5.
What types of attacks are possible with CVE-2011-4870?
CVE-2011-4870 allows remote attackers to execute arbitrary code, potentially leading to system compromise.
Is CVE-2011-4870 exploitation complex?
Exploitation of CVE-2011-4870 can be straightforward for attackers with access to a vulnerable system.