CVE-2011-0331

Published: Mar 22, 2011Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Use-after-free vulnerability in the addOSPLext method in the Honeywell ScanServer ActiveX control 780.0.20.5 allows remote attackers to execute arbitrary code via a crafted HTML document.

Affected (1)

Products: Honeywell: Scanserver Activex Control

Honeywell

1 product

Scanserver Activex Control

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Honeywell Scanserver Activex Control	Version 780.0.20.5

Related CWEs

CWE-399

References (10)

http://osvdb.org/71249

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/43360

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/secunia_research/2011-22/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.securityfocus.com/bid/46930

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2011/0725

Source: PSIRT-CNA@flexerasoftware.com

http://osvdb.org/71249