CVE-2011-4044

This Metasploit module exploits a function pointer control vulnerability in SVUIGrd.ocx of PcVue 10.0 by overwriting a function pointer via SaveObject() or LoadObject() to achieve arbitrary code execution.

The document provides a detailed technical analysis of multiple vulnerabilities in PcVue SCADA software, including code execution, memory corruption, and array overflow issues in specific ActiveX components (SVUIGrd.ocx and aipgctl.ocx). It includes disassembly snippets and exploitation details but does not contain functional exploit code.

This Metasploit module exploits a function pointer control vulnerability in PcVue 10.0's SVUIGrd.ocx via the SaveObject() method, allowing arbitrary code execution through a crafted HTML page targeting Internet Explorer 6/7.