EUVD-2011-5248

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Stack overflow in Cytel Studio 9.0 and earlier from malformed file parsing; arbitrary code on open.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2011-10015	13 Aug 202520:33	–	attackerkb
Circl	CVE-2011-10015	29 May 201815:50	–	circl
CNNVD	Cytel Studio 安全漏洞	13 Aug 202500:00	–	cnnvd
CVE	CVE-2011-10015	13 Aug 202520:33	–	cve
Cvelist	CVE-2011-10015 Cytel Studio <= 9.0 .CY3 File Stack Buffer Overflow	13 Aug 202520:33	–	cvelist
NVD	CVE-2011-10015	13 Aug 202521:15	–	nvd
Positive Technologies	PT-2025-33084 · Cytel · Cytel Studio	13 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2011-10015	15 Aug 202521:29	–	redhatcve
Vulnrichment	CVE-2011-10015 Cytel Studio <= 9.0 .CY3 File Stack Buffer Overflow	13 Aug 202520:33	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "0d10fca1-4902-311b-a2aa-1dc629f1a90b",
        "vendor": {
          "name": "Cytel Inc."
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "456501b1-0db9-39b0-8b7c-f197f84a7805",
        "product": {
          "name": "studio"
        },
        "product_version": "* ≤9.0"
      }
    ]
  }
]

Source	Link
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/cytel_studio_cy3.rb
exploit-db	www.exploit-db.com/exploits/17930
exploit-db	www.exploit-db.com/exploits/18027
aluigi	www.aluigi.altervista.org/adv/cytel_1-adv.txt
web	www.web.archive.org/web/20110708215826/http://www.cytel.com/Software/LogXact.aspx
web	www.web.archive.org/web/20110708215830/http://www.cytel.com/Software/StatXact.aspx
web	www.web.archive.org/web/20110301000000*/http://www.cytel.com/Software/StatXact.aspx
vulncheck	www.vulncheck.com/advisories/cytel-studio-cy3-file-stack-buffer-overflow
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 49.3

EPSS0.04186

SSVC