CVE-2011-0340
InduSoft Web Studio < 7.0 - Remote Code Execution via ISSymbol ActiveX Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-0340.
PoCs published by Metasploit, Alexander Gavrun, Dmitriy Pletnev, including Metasploit module exploits/windows/browser/indusoft_issymbol_internationalseparator.
AI-analyzed exploit summary This is a Metasploit module exploiting a heap overflow in InduSoft Web Studio's ISSymbol.ocx via the InternationalSeparator() method. It uses heap spraying and ROP chains to achieve remote code execution on vulnerable systems.
Description
Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers to execute arbitrary code via a long (1) InternationalOrder, (2) InternationalSeparator, or (3) LogFileName property value; or (4) a long bstrFileName argument to the OpenScreen method.
Exploits (2)
This is a Metasploit module exploiting a heap overflow in InduSoft Web Studio's ISSymbol.ocx via the InternationalSeparator() method. It uses heap spraying and ROP chains to achieve remote code execution on vulnerable systems.
This Metasploit module exploits a heap overflow in InduSoft Web Studio's ISSymbol.ocx via the InternationalSeparator() method, using heap spraying and ROP chains to achieve remote code execution. It targets multiple IE versions on Windows XP, Vista, and 7.