Topazsystems » Sigplus Pro Activex Control : Security Vulnerabilities, CVEs, Published In 2011 (Code Execution)
Multiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allow remote attackers to execute arbitrary code via a long (1) KeyString property, (2) NewPath parameter to the SetLocalIniFilePath method, or (3) NewPortPath parameter to the SetTabletPortPath method.
Max CVSS
9.3
EPSS Score
10.02%
Published
2011-02-07
Updated
2017-08-17
Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to execute arbitrary code by calling the exposed unsafe (1) SetLogFilePath and (2) SigMessage methods to create arbitrary files with arbitrary content.
Max CVSS
9.3
EPSS Score
2.30%
Published
2011-02-07
Updated
2017-08-17
2 vulnerabilities found