← back
CVE-2011-2386

CVE-2011-2386

EPSS 45.2%
VisiWaveReport.exe in AZO Technologies, Inc. VisiWave Site Survey before 2.1.9 allows user-assisted remote attackers to execute arbitrary code via a (1) vws and (2) vwr file with an invalid Type property, which triggers an untrusted pointer dereference.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/17317unverifiedexploitdbwww.exploit-db.com/exploits/17317unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://osvdb.org/72464http://secunia.com/advisories/44636http://www.exploit-db.com/exploits/17317http://www.securityfocus.com/bid/47948http://www.stratsec.net/Research/Advisories/VisiWave-Site-Survey-Report-Trusted-Pointer-%28SS-20http://www.visiwave.com/blog/index.php?/archives/4-Version-2.1.9-Released.html