Buffer overflow in Topazsystems Sigplus Pro Activex Control
CVE-2011-0324
Multiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allow remote attackers to execute arbitrary code via a long (1) KeyString property, (2) NewPath parameter to the SetLocalIniFilePath method, or (3) NewPortPath parameter to the SetTabletPortPath method.
Vulnerability class: Buffer Overflow
EPSS: 0.055 (92.0th percentile) — read the EPSS interpretation.
Affected products
- Topazsystems Sigplus_pro_activex_control — versions 3.95
- N/a — versions n/a
Weakness classification (CWE)
References
- PSIRT-CNA@flexerasoftware.com (x_refsource_MISC, Vendor Advisory)
- PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_XF)
- PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_BID)
- PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_XF)
- PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_XF)