CVE-2012-0258

Published: Apr 2, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA Application Object Toolkit 3.2 and earlier, and InTouch 10.0 through 10.5 might allow remote attackers to execute arbitrary code via a long string to the AddFile member.

Affected (12)

Products: Invensys: Archestra Application Object Toolkit, Foxboro Control Software, Infusion Control Edition, Infusion Foundation Edition, Infusion Scada, Intouch, Wonderware Application Server, Wonderware Information Server

Invensys

8 products

Archestra Application Object Toolkit

Foxboro Control Software

Infusion Control Edition

Infusion Foundation Edition

Infusion Scada

Intouch

Wonderware Application Server

Wonderware Information Server

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Invensys Archestra Application Object Toolkit	Up to 3.2
Invensys Foxboro Control Software	Up to 3.1
Invensys Infusion Control Edition	Up to 2.5
Invensys Infusion Foundation Edition	Up to 2.5
Invensys Infusion Scada	Up to 2.5
Invensys Intouch	Version 10.0
Invensys Intouch	Version 10.5
Invensys Wonderware Application Server	Up to 2012
Invensys Wonderware Information Server	Up to 4.5
Invensys Wonderware Information Server	Version 3.1
Invensys Wonderware Information Server	Version 4.0
Invensys Wonderware Information Server	Version 4.0 sp1