PT-2012-1795 · Arc Informatique · Frontvue+2

Published 2012-04-03 · Updated 2012-04-03 · CVE-2011-4045

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ARC Informatique PcVue versions 6.0 through 10.0 ARC Informatique FrontVue ARC Informatique PlantVue

Description A buffer overflow issue exists in an unspecified ActiveX control in aipgctl.ocx. This issue can be exploited by remote attackers via a crafted HTML document, leading to a denial of service.

Recommendations For ARC Informatique PcVue versions 6.0 through 10.0, consider disabling the use of the aipgctl.ocx ActiveX control until a patch is available. For ARC Informatique FrontVue, restrict access to the affected ActiveX control to minimize the risk of exploitation. For ARC Informatique PlantVue, avoid using the affected ActiveX control in HTML documents until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-4045

Affected Products

Frontvue

Pcvue

Plantvue

References · 5

• 🔥 https://exploit-db.com/exploits/17896 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-4045 · Security Note
• http://pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257 · Vendor Advisory
• http://us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf · Note
• https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440 · Note