CVE-2011-0340

CVE-2011-0340 affects the InduSoft ISSymbol ActiveX control (ISSymbol.ocx) and related InduSoft/Web Studio components. The root cause is heap-based buffer overflows triggered by overly long strings in properties InternationalOrder, InternationalSeparator, LogFileName, or in the OpenScreen method’...

CVE-2011-0340: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers to execute...

PT-2011-2279

Name of the Vulnerable Software and Affected Versions InduSoft Web Studio versions prior to 7.0+SP1 InduSoft Thin Client version 7.0 Advantech Studio version 6.1 SP6 61.6.01.05 Description The issue allows remote attackers to execute arbitrary code via a long value in certain properties or method...

CVE-2011-0488: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long request to TCP port 8...

Advantech Studio Test Web Server Buffer Overflow

Overview The ICS-CERT has received a report from independent security researcher Jeremy Brown that reveals a stack-based buffer overflow vulnerability in the test web server bundled with Advantech Studio Version 6.1. This web server is intended to be used for testing purposes and should not be us...