CVE-2011-4042

An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer...

Integer overflow

Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code via a large value for an integer parameter, leading to a buffer overflow...

CVE-2011-4043

CVE-2011-4043 is a buffer overflow in ARC Informatique PcVue’s SVUIGrd.ocx ActiveX control. A crafted large integer input can trigger memory corruption and remote code execution. Affected products include PcVue 6.0–10.0, FrontVue, and PlantVue. Red Hat and ICS-CERT sources corroborate the vulnera...

CVE-2011-4044: Undefined Security Weakness

An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods...

CVE-2011-4042: Undefined Security Weakness

An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer...

CVE-2011-4043: Undefined Security Weakness

Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code via a large value for an integer parameter, leading to a buffer overflow...

PT-2012-1792

Name of the Vulnerable Software and Affected Versions ARC Informatique PcVue versions 6.0 through 10.0 ARC Informatique FrontVue ARC Informatique PlantVue Description The issue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function...

PT-2012-1793

Name of the Vulnerable Software and Affected Versions ARC Informatique PcVue versions 6.0 through 10.0 ARC Informatique FrontVue affected versions not specified ARC Informatique PlantVue affected versions not specified Description The issue is related to an integer overflow in an unspecified...

PT-2012-1795

Name of the Vulnerable Software and Affected Versions ARC Informatique PcVue versions 6.0 through 10.0 ARC Informatique FrontVue ARC Informatique PlantVue Description A buffer overflow issue exists in an unspecified ActiveX control in aipgctl.ocx. This issue can be exploited by remote attackers v...

PT-2012-1794

Name of the Vulnerable Software and Affected Versions ARC Informatique PcVue versions 6.0 through 10.0 ARC Informatique FrontVue ARC Informatique PlantVue Description The issue allows remote attackers to modify files via calls to unknown methods in an unspecified ActiveX control in SVUIGrd.ocx...

CVE-2011-4045: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to cause a denial of service via a crafted HTML document...

ARC Informatique PcVue HMI/SCADA ActiveX Vulnerabilities

Overview This Advisory is a follow-up to the Alert, “ICS-ALERT-11-271-01 - ARC Informatique PcVue HMI/SCADA ActiveX Vulnerabilities.” ICS-CERT is aware of publicly and privately disclosed reports of four vulnerabilities in ARC Informatique’s PcVue application. These vulnerabilities include:...