Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as…

published 2011-05-04 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-0366

cvss: 9.3; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 32.3%; EPSS 32.3% chance of exploitation in 30 days, percentile 98%
public exploits: 2; Metasploit, Exploit-DB

Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers to execute arbitrary code via a long (1) InternationalOrder, (2) InternationalSeparator, or (3) LogFileName property value; or (4) a long bstrFileName argument to the OpenScreen method.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-12-249-03 updated 2025-06-18 cvss 7.5

InduSoft ISSymbol ActiveX Control Buffer Overflow

InduSoft ISSymbol ActiveX Control Build_301.1009.2904.0 InduSoft Thin Client 7.0 InduSoft Web Studio 7.0B2
affected: mitigation “Apply hotfix 70.1.02.12. The InduSoft security patch and details are available at: (http://www.indusoft.com/hotfixes/hotfixes.php).”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-12-137-02 updated 2025-06-06 cvss 9.3

Advantech Studio ISSymbol ActiveX Buffer Overflow

Advantech ISSymbol ActiveX Control 61.6.0.0 Advantech Studio 6.1_SP6_Build_61.6.01.05
affected: mitigation

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Timeline

2011-05-04 Published
2012-04-28 First public exploit (Metasploit exploit/windows/browser/indusoft_issymbol_internationalseparator)

Exploit prediction

32.35% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

Metasploit exploit/windows/browser/indusoft_issymbol_internationalseparator InduSoft Web Studio ISSymbol.ocx InternationalSeparator() Heap Overflow metasploit exploit, normal rank, 2012-04-28
EDB-23500 InduSoft Web Studio - 'ISSymbol.ocx InternationalSeparator()' Heap Overflow (Metasploit) remote, 2012-12-20

CVSS scores

assigned by	version	score	vector
NVD	2.0	9.3	AV:N/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

secunia.com /advisories/43116
third-party-advisory, vendor-advisory
secunia.com /secunia_research/2011-37/
vendor-advisory
vupen.com /english/advisories/2011/1116
vdb-entry, vendor-advisory
secunia.com /advisories/42928
third-party-advisory, vendor-advisory
vupen.com /english/advisories/2011/1115
vdb-entry, vendor-advisory
secunia.com /secunia_research/2011-36/
vendor-advisory
securityfocus.com /bid/47596
vdb-entry
ics-cert.us-cert.gov /advisories/ICSA-12-249-03
us-cert.gov /control_systems/pdf/ICSA-12-137-02.pdf
indusoft.com /hotfixes/hotfixes.php
advantechdirect.com /eMarketingPrograms/AStudio_Patch/AStudio7.0_Patch_Final.htm

Sources

CVE List CVE-2011-0340
NVD CVE-2011-0340

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary