CVE-2011-2089

Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in the argument. NOTE: some of these details are obtained from third party information.

• CWE-119

• http://secunia.com/advisories/44417Vendor Advisory
• http://www.exploit-db.com/exploits/17240Exploit
• http://www.exploit-db.com/exploits/17269Exploit
• http://www.osvdb.org/72135
• http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdfExploit
• http://www.securityfocus.com/bid/47704Exploit
• http://www.us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdfUS Government Resource
• http://www.vupen.com/english/advisories/2011/1174Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67267
• http://secunia.com/advisories/44417Vendor Advisory
• http://www.exploit-db.com/exploits/17240Exploit
• http://www.exploit-db.com/exploits/17269Exploit
• http://www.osvdb.org/72135
• http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdfExploit
• http://www.securityfocus.com/bid/47704Exploit
• http://www.us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdfUS Government Resource
• http://www.vupen.com/english/advisories/2011/1174Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67267

Published

May 13, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2082The vulnerable-passwords script in Best Practical Solutions …
• CVE-2011-2083Multiple cross-site scripting (XSS) vulnerabilities in Best …
• CVE-2011-2084Best Practical Solutions RT 3.x before 3.8.12 and 4.x before…
• CVE-2011-2085Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2011-2087Multiple cross-site scripting (XSS) vulnerabilities in compo…
• CVE-2011-2088XWork 2.2.1 in Apache Struts 2.2.1, and OpenSymphony XWork i…
• CVE-2011-2091Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.…
• CVE-2011-2092Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0…
• CVE-2011-2093Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0…
• CVE-2011-2094Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, …
• CVE-2011-2095Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, …
• CVE-2011-2096Heap-based buffer overflow in Adobe Reader and Acrobat 8.x b…