CVE-2011-4039

Published: Feb 10, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows user-assisted remote attackers to execute arbitrary code via a malformed file that triggers a "write access violation."

Affected (5)

Products: Dreamreport: Dream Report · Invensys: Wonderware Hmi Reports

Dreamreport

1 product

Dream Report

Invensys

1 product

Wonderware Hmi Reports

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Dreamreport Dream Report	Up to 3.43
Dreamreport Dream Report	Version 3.21
Dreamreport Dream Report	Version 3.41
Dreamreport Dream Report	Version 3.42
Invensys Wonderware Hmi Reports	Up to 3.42.835.0304