CVE-2011-10015

🗓️ 13 Aug 2025 20:33:27Reported by VulnCheckType

Stack overflow in Cytel Studio 9.0 and earlier from parsing a malformed CY3 file; writes to a 256-byte stack buffer enabling code execution.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2011-10015	13 Aug 202520:33	–	attackerkb
Circl	CVE-2011-10015	29 May 201815:50	–	circl
CNNVD	Cytel Studio 安全漏洞	13 Aug 202500:00	–	cnnvd
Cvelist	CVE-2011-10015 Cytel Studio <= 9.0 .CY3 File Stack Buffer Overflow	13 Aug 202520:33	–	cvelist
EUVD	EUVD-2011-5248	7 Oct 202500:30	–	euvd
NVD	CVE-2011-10015	13 Aug 202521:15	–	nvd
Positive Technologies	PT-2025-33084 · Cytel · Cytel Studio	13 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2011-10015	15 Aug 202521:29	–	redhatcve
Vulnrichment	CVE-2011-10015 Cytel Studio <= 9.0 .CY3 File Stack Buffer Overflow	13 Aug 202520:33	–	vulnrichment

Vulners

Node

cytel cytel_studioRange0–9.0

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "cy3parser.dll or internal file loader",
      ".CY3 file format"
    ],
    "product": "Cytel Studio",
    "vendor": "Cytel Inc.",
    "versions": [
      {
        "lessThanOrEqual": "9.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/cytel-studio-cy3-file-stack-buffer-overflow
exploit-db	www.exploit-db.com/exploits/17930
web	www.web.archive.org/web/20110301000000*/http://www.cytel.com/Software/StatXact.aspx
aluigi	www.aluigi.altervista.org/adv/cytel_1-adv.txt
web	www.web.archive.org/web/20110708215830/http://www.cytel.com/Software/StatXact.aspx
web	www.web.archive.org/web/20110708215826/http://www.cytel.com/Software/LogXact.aspx
exploit-db	www.exploit-db.com/exploits/18027
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/cytel_studio_cy3.rb

25 May 2026 23:40Current

8.3High risk

Vulners AI Score8.3

CVSS 49.3

EPSS0.04186

SSVC

CWE-121