HIGH🇵🇱 Wersja polska

CVE-2011-4042

CVSS 9.3v2.0pub. 2012-04-03upd. 2026-07-09

An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer.

CVSS Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Arcinfo Frontvue

    APP
    Arcinfo
    all versions

  • Arcinfo Pcvue

    APP
    Arcinfo
    6.0 – 10.0

  • Arcinfo Plantvue

    APP
    Arcinfo
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2020-26867CRITICAL9.8PL ✓same product

RCE poprzez deserializację niezaufanych danych w ARC Informatique PcVue

CVE-2026-14868HIGH8.4PL ✓same product

Słaby algorytm szyfrowania konfiguracji kont w PcVue

CVE-2020-26869HIGH7.5same product

ARC Informatique PcVue prior to version 12.0.17 is vulnerable to information exposure, allowing unauthorized u...

CVE-2020-26868HIGH7.5same product

ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability...

CVE-2011-4043HIGH9.3same product

Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, ...