Exploitation Summary
EIP tracks 1 public exploit for CVE-2011-4034.
Includes Metasploit module exploits/windows/browser/teechart_pro.
AI-analyzed exploit summary This Metasploit module exploits an integer overflow in TeeChart Pro ActiveX control (CVE-2011-4034) by sending a large/negative integer to the AddSeries() property, leading to arbitrary code execution. It includes DEP/ASLR bypass techniques for IE8 with Java support.
Description
Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.
Exploits (1)
This Metasploit module exploits an integer overflow in TeeChart Pro ActiveX control (CVE-2011-4034) by sending a large/negative integer to the AddSeries() property, leading to arbitrary code execution. It includes DEP/ASLR bypass techniques for IE8 with Java support.