CVE-2011-4034

Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.

• CWE-119

• http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695Patch, Vendor Advisory
• http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.pagePatch, Vendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdfPatch, US Government Resource
• http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695Patch, Vendor Advisory
• http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.pagePatch, Vendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdfPatch, US Government Resource

Published

Dec 2, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4026SQL injection vulnerability in thanks.php in NexusPHP 1.5 al…
• CVE-2011-4028The LockServer function in os/utils.c in X.Org xserver befor…
• CVE-2011-4029The LockServer function in os/utils.c in X.Org xserver befor…
• CVE-2011-4030The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, …
• CVE-2011-4031Integer underflow in the asfrtp_parse_packet function in lib…
• CVE-2011-4033Buffer overflow in the Steema TeeChart ActiveX control, as u…
• CVE-2011-4035Cross-site scripting (XSS) vulnerability in Schneider Electr…
• CVE-2011-4036Directory traversal vulnerability in Schneider Electric Vije…
• CVE-2011-4037Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 …
• CVE-2011-4038Cross-site scripting (XSS) vulnerability in Invensys Wonderw…
• CVE-2011-4039Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, a…
• CVE-2011-4040Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator…