CVE-2011-0340

CVE-2011-0340 affects the InduSoft ISSymbol ActiveX control (ISSymbol.ocx) and related InduSoft/Web Studio components. The root cause is heap-based buffer overflows triggered by overly long strings in properties InternationalOrder, InternationalSeparator, LogFileName, or in the OpenScreen method’...

CVE-2013-1627

The CVE-2013-1627 entry describes a directory traversal (CWE-22) in NTWebServer.exe used by Indusoft Studio 7.0 and Advantech Studio 7.0 and earlier. The vulnerability allows remote attackers to read arbitrary files by supplying a full pathname to the sub_401A90 CreateFileW call, enabling potenti...

CVE-2011-0488

CVE-2011-0488 is a stack-based buffer overflow in NTWebServer.exe (InduSoft NTWebServer) shipped with Advantech Studio 6.1 and InduSoft Web Studio 7.0. The vulnerability is triggered by requests > 2048 bytes to TCP port 80, allowing remote attackers to cause a denial of service (daemon crash) ...