CVE-2011-3141

Invensys Wonderware InBatch 8.1 SP1, 9.0, and 9.0 SP1 - Buffer Overflow in BatchField ActiveX Control

Title source: llm

Description

Buffer overflow in the InBatch BatchField ActiveX control for Invensys Wonderware InBatch 8.1 SP1, 9.0, and 9.0 SP1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

References (4)

Core 4

Core References

Various Sources x_refsource_misc

http://www.us-cert.gov/control_systems/pdf/ICSA-11-094-01.pdf

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/44336

Vendor Advisory x_refsource_confirm

http://iom.invensys.com/EN/pdfLibrary/Final.Tech.Alert.141.pdf

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/72182

Scores

EPSS 0.0405

EPSS Percentile 89.4%

Details

CWE

CWE-119

Status published

Products (2)

invensys/wonderware_inbatch 8.1 sp1

invensys/wonderware_inbatch 9.0 (2 CPE variants)

Published Aug 16, 2011

Tracked Since Feb 18, 2026