InduSoft ISSymbol ActiveX Control 'ISSymbol.ocx' Multiple Buffer Overflow Vulnerabilities
BID:49403
Info
InduSoft ISSymbol ActiveX Control 'ISSymbol.ocx' Multiple Buffer Overflow Vulnerabilities
| Bugtraq ID: | 49403 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2011-0342 CVE-2011-0342 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 01 2011 12:00AM |
| Updated: | Sep 30 2011 10:50PM |
| Credit: | Dmitriy Pletnev, Secunia Research. |
| Vulnerable: |
Indusoft Web Studio 7.0B2 Hotfix 7.0.01. Indusoft InduSoft ISSymbol ActiveX Control 301.1104.601.0 |
| Not Vulnerable: | |
Discussion
InduSoft ISSymbol ActiveX Control 'ISSymbol.ocx' Multiple Buffer Overflow Vulnerabilities
The InduSoft ISSymbol ActiveX control is prone to multiple buffer-overflow vulnerabilities.
Attackers could exploit these issues to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts will likely result in denial-of-service conditions.
The InduSoft ISSymbol ActiveX control is prone to multiple buffer-overflow vulnerabilities.
Attackers could exploit these issues to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts will likely result in denial-of-service conditions.
Exploit / POC
InduSoft ISSymbol ActiveX Control 'ISSymbol.ocx' Multiple Buffer Overflow Vulnerabilities
Reports indicate exploit code is available.
Reports indicate exploit code is available.
Solution / Fix
InduSoft ISSymbol ActiveX Control 'ISSymbol.ocx' Multiple Buffer Overflow Vulnerabilities
Solution:
Updates are available. Please contact the vendor for more information.
Solution:
Updates are available. Please contact the vendor for more information.
References
InduSoft ISSymbol ActiveX Control 'ISSymbol.ocx' Multiple Buffer Overflow Vulnerabilities
References:
References: