CVE-2012-0227
critical
CVSS v3
—
CVSS v4 NEW
—
VIR risk
9.3
Description
Buffer overflow in the VSFlex7.VSFlexGrid ActiveX control in ComponentOne FlexGrid 7.1, as used in Open Automation Software OPC Systems.NET, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long archive file name argument to the Archive method.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| componentone | flexgrid | 7.1 | |
| opcsystems | opcsystems.net | {"endIncluding":"4.0"} | |
| opcsystems | opcsystems.net | - | |
References
- http://dsecrg.com/pages/vul/show.php?id=406
- http://www.securityfocus.com/bid/51601
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-012-01A.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72604
- http://dsecrg.com/pages/vul/show.php?id=406
- http://www.securityfocus.com/bid/51601
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-012-01A.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72604
CWEs
CWE-119
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.