SCADA ICONICS WebHMI ActiveX Stack Overflow (CVE-2011-2089)

A code execution vulnerability exists in ICONICS WebHMI's ActiveX control. The vulnerability occurs in GenVersion.dll due to improper bounds checking before the input is copied onto the stack. A remote attacker could exploit this vulnerability by sending a long string of data to the...

CVE-2011-2089

Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in the argument. NOTE...

CVE-2011-2089

creationtimestamp| type| source ---|---|--- 2011-05-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17240 2011-05-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17269 2018-05-29 15:50:33+00:00| seen|...