Secunia Research: InduSoft ISSymbol ActiveX Control Buffer Overflow Vulnerabilities

====================================================================== Secunia Research 01/09/2011 - InduSoft ISSymbol ActiveX Control Buffer Overflows - ====================================================================== Table of Contents Affected...

CVE-2011-0342

Summary (CVE-2011-0342) : InduSoft ISSymbol ActiveX control (ISSymbol.ocx 301.1104.601.0) in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 is affected. Boundary- or heap/stack-based buffer overflows occur when processing the Open, Close, or SetCurrentLanguage methods due to overly long strings, allo...

InduSoft ISSymbol ActiveX Control Buffer Overflow

Overview ICS-CERT has received a report from independent security researcher Dmitriy Pletnev of Secunia Research about ActiveX control buffer overflow vulnerabilities with proof-of-concept exploit code affecting the InduSoft ISSymbol product. Secunia has coordinated with InduSoft, who has produce...