CVE-2011-4055

CVE-2011-4055 is a buffer overflow in the WebClient ActiveX control of Siemens Tecnomatix FactoryLink affecting v6.6.1 (6.6 SP1), v7.5.217 (7.5 SP2), and v8.0.2.54. An attacker could trigger arbitrary code execution by supplying a long string in a parameter for the location URL, remotely exploita...

Siemens FactoryLink Multiple ActiveX Vulnerabilities

Overview ICS-CERT originally released Advisory ICSA-11-343-01P on the US-CERT secure portal on December 09, 2011. This web page release was delayed to allow users time to download and install the update. Researcher Kuang-Chun Hung of Taiwan’s Information and Communication Security Technology Cent...