CVE-2011-2386

VisiWaveReport.exe in AZO Technologies, Inc. VisiWave Site Survey before 2.1.9 allows user-assisted remote attackers to execute arbitrary code via a (1) vws and (2) vwr file with an invalid Type property, which triggers an untrusted pointer dereference.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
VendorProductVersion
visiwavesite_survey
𝑥
≤ 2.1
visiwavesite_survey
1.6.12
visiwavesite_survey
2.0.12
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/72464
http://secunia.com/advisories/44636
http://www.exploit-db.com/exploits/17317
http://www.securityfocus.com/bid/47948
http://www.stratsec.net/Research/Advisories/VisiWave-Site-Survey-Report-Trusted-Pointer-%28SS-20
http://www.visiwave.com/blog/index.php?/archives/4-Version-2.1.9-Released.html
http://osvdb.org/72464
http://secunia.com/advisories/44636
http://www.exploit-db.com/exploits/17317
http://www.securityfocus.com/bid/47948
http://www.stratsec.net/Research/Advisories/VisiWave-Site-Survey-Report-Trusted-Pointer-%28SS-20
http://www.visiwave.com/blog/index.php?/archives/4-Version-2.1.9-Released.html