CVE-2011-4042

2012-04-0303:44:35

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.06

Percentile

93.6%

JSON

An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer.

Affected configurations

Nvd

Node

arcinfofrontvue

arcinfopcvueMatch6.0

arcinfopcvueMatch8.2

arcinfopcvueMatch9.0

arcinfopcvueMatch10.0

arcinfoplantvue

VendorProductVersionCPE
arcinfofrontvue*cpe:2.3:a:arcinfo:frontvue:*:*:*:*:*:*:*:*
arcinfopcvue6.0cpe:2.3:a:arcinfo:pcvue:6.0:*:*:*:*:*:*:*
arcinfopcvue8.2cpe:2.3:a:arcinfo:pcvue:8.2:*:*:*:*:*:*:*
arcinfopcvue9.0cpe:2.3:a:arcinfo:pcvue:9.0:*:*:*:*:*:*:*
arcinfopcvue10.0cpe:2.3:a:arcinfo:pcvue:10.0:*:*:*:*:*:*:*
arcinfoplantvue*cpe:2.3:a:arcinfo:plantvue:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
arcinfo	frontvue	*	cpe:2.3:a:arcinfo:frontvue::::::::
arcinfo	pcvue	6.0	cpe:2.3:a:arcinfo:pcvue:6.0:::::::*
arcinfo	pcvue	8.2	cpe:2.3:a:arcinfo:pcvue:8.2:::::::*
arcinfo	pcvue	9.0	cpe:2.3:a:arcinfo:pcvue:9.0:::::::*
arcinfo	pcvue	10.0	cpe:2.3:a:arcinfo:pcvue:10.0:::::::*
arcinfo	plantvue	*	cpe:2.3:a:arcinfo:plantvue::::::::