CVE-2012-0258

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.16%

Published

Apr 2, 2012

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA Application Object Toolkit 3.2 and earlier, and InTouch 10.0 through 10.5 might allow remote attackers to execute arbitrary code via a long string to the AddFile member.

Weaknesses (CWE)

CWE-119

Affected Products (12)

invensys · archestra_application_object_toolkitvulnerable

invensys · foxboro_control_softwarevulnerable

invensys · infusion_control_editionvulnerable

invensys · infusion_foundation_editionvulnerable

invensys · infusion_scadavulnerable

invensys · intouchvulnerable

invensys · wonderware_application_servervulnerable

invensys · wonderware_information_servervulnerable

References (8)