PT-2012-1793 · Arc Informatique · Frontvue+2

Published 2012-04-03 · Updated 2012-04-03 · CVE-2011-4043

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ARC Informatique PcVue versions 6.0 through 10.0 ARC Informatique FrontVue (affected versions not specified) ARC Informatique PlantVue (affected versions not specified)

Description The issue is related to an integer overflow in an unspecified ActiveX control in the SVUIGrd.ocx component. This overflow can be triggered by providing a large value for an integer parameter, which leads to a buffer overflow. As a result, remote attackers may be able to execute arbitrary code.

Recommendations For ARC Informatique PcVue versions 6.0 through 10.0, consider disabling the use of the SVUIGrd.ocx component until a patch is available. For ARC Informatique FrontVue and PlantVue, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2011-4043

Affected Products

Frontvue

Pcvue

Plantvue

References · 5

• 🔥 https://exploit-db.com/exploits/17896 · Exploit
• http://pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-4043 · Security Note
• http://us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf · Note
• https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440 · Note