{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2011-05-11T00:00:00", "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in the argument. NOTE: some of these details are obtained from third party information."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdf"}, {"name": "72135", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/72135"}, {"name": "44417", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/44417"}, {"tags": ["x_refsource_MISC"], "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdf"}, {"name": "ADV-2011-1174", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2011/1174"}, {"name": "47704", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/47704"}, {"name": "17240", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "http://www.exploit-db.com/exploits/17240"}, {"name": "17269", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "http://www.exploit-db.com/exploits/17269"}, {"name": "webhmi-activex-bo(67267)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67267"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2011-2089", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in the argument. NOTE: some of these details are obtained from third party information."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdf", "refsource": "MISC", "url": "http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdf"}, {"name": "72135", "refsource": "OSVDB", "url": "http://www.osvdb.org/72135"}, {"name": "44417", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/44417"}, {"name": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdf", "refsource": "MISC", "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdf"}, {"name": "ADV-2011-1174", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2011/1174"}, {"name": "47704", "refsource": "BID", "url": "http://www.securityfocus.com/bid/47704"}, {"name": "17240", "refsource": "EXPLOIT-DB", "url": "http://www.exploit-db.com/exploits/17240"}, {"name": "17269", "refsource": "EXPLOIT-DB", "url": "http://www.exploit-db.com/exploits/17269"}, {"name": "webhmi-activex-bo(67267)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67267"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T22:46:00.947Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdf"}, {"name": "72135", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/72135"}, {"name": "44417", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/44417"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdf"}, {"name": "ADV-2011-1174", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2011/1174"}, {"name": "47704", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/47704"}, {"name": "17240", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "http://www.exploit-db.com/exploits/17240"}, {"name": "17269", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "http://www.exploit-db.com/exploits/17269"}, {"name": "webhmi-activex-bo(67267)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67267"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2011-2089", "datePublished": "2011-05-13T17:00:00", "dateReserved": "2011-05-13T00:00:00", "dateUpdated": "2024-08-06T22:46:00.947Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:iconics:bizviz:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "2854F716-ED09-46E8-AF9C-030EADDDB29F", "vulnerable": true}, {"criteria": "cpe:2.3:a:iconics:bizviz:9.01:*:*:*:*:*:*:*", "matchCriteriaId": "E3214375-3D3A-47F9-BE1F-D92102A8C8F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:iconics:bizviz:9.1:*:*:*:*:*:*:*", "matchCriteriaId": "0585FE5D-0FA5-4E13-AA5E-B5714564A14C", "vulnerable": true}, {"criteria": "cpe:2.3:a:iconics:bizviz:9.2:*:*:*:*:*:*:*", "matchCriteriaId": "3E4B6521-EE6D-49FB-B771-830B34613007", "vulnerable": true}, {"criteria": "cpe:2.3:a:iconics:bizviz:9.13:*:*:*:*:*:*:*", "matchCriteriaId": "22060866-9121-480B-913A-41616CD94A27", "vulnerable": true}, {"criteria": "cpe:2.3:a:iconics:bizviz:9.20:*:*:*:*:*:*:*", "matchCriteriaId": "278C55AD-294C-4D39-8E50-0726CA523A34", "vulnerable": true}, {"criteria": "cpe:2.3:a:iconics:bizviz:9.21:*:*:*:*:*:*:*", "matchCriteriaId": "0B4F2D10-A4DD-4C7C-A5A8-BEDC23A413C2", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:iconics:genesis32:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "6E01069E-E059-446B-A0C5-89C37C902D3D", "vulnerable": true}, {"criteria": "cpe:2.3:a:iconics:genesis32:9.1:*:*:*:*:*:*:*", "matchCriteriaId": "02BE61E1-12E1-46B3-B725-9A73EAD272B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:iconics:genesis32:9.01:*:*:*:*:*:*:*", "matchCriteriaId": "F7784C58-C8CF-4631-8171-67D95595FF79", "vulnerable": true}, {"criteria": "cpe:2.3:a:iconics:genesis32:9.2:*:*:*:*:*:*:*", "matchCriteriaId": "3F303667-A48E-40D2-9C38-C9C2813020AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:iconics:genesis32:9.13:*:*:*:*:*:*:*", "matchCriteriaId": "86628D9D-4270-4571-A57A-17962BC2027D", "vulnerable": true}, {"criteria": "cpe:2.3:a:iconics:genesis32:9.20:*:*:*:*:*:*:*", "matchCriteriaId": "2EFFA7EA-6775-44B8-88ED-D1B6E4AE259A", "vulnerable": true}, {"criteria": "cpe:2.3:a:iconics:genesis32:9.21:*:*:*:*:*:*:*", "matchCriteriaId": "7CDD1388-8FBF-4B3E-854E-B68D3EB6569B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in the argument. NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en el m\u00e9todo SetActiveXGUID en el control VersionInfo ActiveX en GenVersion.dll v8.0.138.0 en el subsistema WebHMI en ICONICS BizViz v9.x anterior a v9.22 y GENESIS32 v9.x anterior a v9.22 permite a atacantes remotos ejecutar c\u00f3digo de su lecci\u00f3n a trav\u00e9s de una cadena larga en el argumento. NOTA: alguno de estos detalles son obtenidos de terceras partes de informaci\u00f3n"}], "id": "CVE-2011-2089", "lastModified": "2017-08-29T01:29:16.080", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2011-05-13T17:05:45.643", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/44417"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.exploit-db.com/exploits/17240"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.exploit-db.com/exploits/17269"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/72135"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdf"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/47704"}, {"source": "cve@mitre.org", "tags": ["US Government Resource"], "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdf"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2011/1174"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67267"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}