CVE-2012-0227

CRITICAL 9.3CVE-2012-0227 · Published 12/10/2012 · updated 16/06/2026

In short

CVE-2012-0227 is a CRITICAL (CVSS 9.3) vulnerability affecting flexgrid (componentone), opcsystems.net (opcsystems).
Chance of exploitation in the next 30 days (EPSS): 5.7%, higher than 93.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
flexgrid componentone	`= 7.1`	No fix yet
opcsystems.net opcsystems	`≤ 4.0`	No fix yet

Description

Buffer overflow in the VSFlex7.VSFlexGrid ActiveX control in ComponentOne FlexGrid 7.1, as used in Open Automation Software OPC Systems.NET, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long archive file name argument to the Archive method.

References

dsecrg.com/pages/vul/show.php · Exploit
securityfocus.com/bid/51601
us-cert.gov/control_systems/pdf/ICSA-12-012-01A.pdf · US Government Resource
exchange.xforce.ibmcloud.com/vulnerabilities/72604

More vulnerabilities in flexgrid

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free