CVE-2011-4044
ARC Informatique PcVue 6.0-10.0 FrontVue and PlantVue - Arbitrary File Write via SVUIGrd.ocx ActiveX Control
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2011-4044.
PoCs published by Metasploit, Luigi Auriemma, including Metasploit module exploits/windows/browser/pcvue_func.
AI-analyzed exploit summary This Metasploit module exploits a function pointer control vulnerability in SVUIGrd.ocx of PcVue 10.0 by overwriting a function pointer via SaveObject() or LoadObject() to achieve arbitrary code execution.
Description
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods.
Exploits (3)
This Metasploit module exploits a function pointer control vulnerability in SVUIGrd.ocx of PcVue 10.0 by overwriting a function pointer via SaveObject() or LoadObject() to achieve arbitrary code execution.
The document provides a detailed technical analysis of multiple vulnerabilities in PcVue SCADA software, including code execution, memory corruption, and array overflow issues in specific ActiveX components (SVUIGrd.ocx and aipgctl.ocx). It includes disassembly snippets and exploitation details but does not contain functional exploit code.
This Metasploit module exploits a function pointer control vulnerability in PcVue 10.0's SVUIGrd.ocx via the SaveObject() method, allowing arbitrary code execution through a crafted HTML page targeting Internet Explorer 6/7.