CVE-2011-0342

CRITICAL 10.0CVE-2011-0342 · Published 02/09/2011 · updated 16/06/2026

In short

CVE-2011-0342 is a CRITICAL (CVSS 10.0) vulnerability affecting web studio (indusoft).
Chance of exploitation in the next 30 days (EPSS): 5.9%, higher than 93.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
web studio indusoft	`= 7.0b2`	No fix yet

Description

Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the (1) Open, (2) Close, or (3) SetCurrentLanguage method.

References

ics-cert.us-cert.gov/advisories/ICSA-11-273-02
secunia.com/advisories/44875 · Vendor Advisory
secunia.com/secunia_research/2011-61 · Vendor Advisory
indusoft.com/hotfixes/hotfixes.php
securityfocus.com/bid/49403

More vulnerabilities in web studio

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

web studio

indusoft

= 7.0b2

No fix yet

More vulnerabilities in web studio

See all →