CVE-2011-2386

CRITICAL 9.3CVE-2011-2386 · Published 08/06/2011 · updated 16/06/2026

Package	Affected versions	Patched versions
site survey visiwave	`= 1.6.12= 2.0.12≤ 2.1`	No fix yet

Description

VisiWaveReport.exe in AZO Technologies, Inc. VisiWave Site Survey before 2.1.9 allows user-assisted remote attackers to execute arbitrary code via a (1) vws and (2) vwr file with an invalid Type property, which triggers an untrusted pointer dereference.

References

osvdb.org/72464
secunia.com/advisories/44636 · Vendor Advisory
exploit-db.com/exploits/17317 · Exploit
securityfocus.com/bid/47948 · Exploit
stratsec.net/Research/Advisories/VisiWave-Site-Survey-Report-Trusted-Pointer-%28SS-20 · Exploit
visiwave.com/blog/index.php · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free