Vulnerability Details CVE-2011-2962
Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via two unspecified ActiveX controls.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.048
EPSS Ranking 88.9%
CVSS Severity
CVSS v2 Score 9.3
References
- http://secunia.com/advisories/45476
- http://www.securityfocus.com/bid/48976
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-195-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68988
- http://secunia.com/advisories/45476
- http://www.securityfocus.com/bid/48976
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-195-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68988
Products affected by CVE-2011-2962
-
cpe:2.3:a:invensys:wonderware_information_server:3.1
-
cpe:2.3:a:invensys:wonderware_information_server:4.0