Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2012-0257 Details

Description

Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA Application Object Toolkit 3.2 and earlier, and InTouch 10.0 through 10.5 might allow remote attackers to execute arbitrary code via a long string to the Open member, leading to a function-pointer overwrite.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://osvdb.org/80891	CVE
http://secunia.com/advisories/48675	CVE
https://wdnresource.wonderware.com/support/docs/_SecurityBulletins/Security_Bulletin_LFSEC00000071.pdf	CVE
http://www.us-cert.gov/control_systems/pdf/ICSA-12-081-01.pdf	CVE	US Government Resource
http://osvdb.org/80891	[email protected]
http://secunia.com/advisories/48675	[email protected]
https://wdnresource.wonderware.com/support/docs/_SecurityBulletins/Security_Bulletin_LFSEC00000071.pdf	[email protected]
http://www.us-cert.gov/control_systems/pdf/ICSA-12-081-01.pdf	[email protected]	US Government Resource

see all 8 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	[email protected]

Affected Products

Product	Versions
invensys archestra application object toolkit	<= 3.2
CPE cpe:2.3:a:invensys:archestra_application_object_toolkit:::::::: Remediation No remediation found in references.
invensys foxboro control software	<= 3.1
CPE cpe:2.3:a:invensys:foxboro_control_software:::::::: Remediation No remediation found in references.
invensys infusion control edition	<= 2.5
CPE cpe:2.3:a:invensys:infusion_control_edition:::::::: Remediation No remediation found in references.
invensys infusion foundation edition	<= 2.5
CPE cpe:2.3:a:invensys:infusion_foundation_edition:::::::: Remediation No remediation found in references.
invensys infusion scada	<= 2.5
CPE cpe:2.3:a:invensys:infusion_scada:::::::: Remediation No remediation found in references.
invensys intouch	10.0 10.5
CPE cpe:2.3:a:invensys:intouch:10.0:::::::* cpe:2.3:a:invensys:intouch:10.5:::::::* Remediation No remediation found in references.
invensys wonderware application server	<= 2012
CPE cpe:2.3:a:invensys:wonderware_application_server:::::::: Remediation No remediation found in references.
invensys wonderware information server	<= 4.5 3.1 4.0 4.0 sp1
CPE cpe:2.3:a:invensys:wonderware_information_server:::::::: cpe:2.3:a:invensys:wonderware_information_server:3.1:::::::* cpe:2.3:a:invensys:wonderware_information_server:4.0:::::::* cpe:2.3:a:invensys:wonderware_information_server:4.0:sp1:::::: Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 29, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Apr 3, 2012	Initial Analysis	[email protected]

CVE-2012-0257 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO