CVE-2012-0254

Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions (HPS) Experion R2xx, R30x, R31x, and R400.x; Honeywell Building Solutions (HBS) Enterprise Building Manager R400 and R410.1; and Honeywell Environmental Combustion and Controls (ECC) SymmetrE R410.1 allows remote attackers to execute arbitrary code via unspecified vectors.

• CWE-787

• http://www.us-cert.gov/control_systems/pdf/ICSA-12-150-01.pdfThird Party Advisory, US Government Resource
• https://www.honeywellprocess.com/en-US/support/pages/all-notifications.aspxVendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-150-01.pdfThird Party Advisory, US Government Resource
• https://www.honeywellprocess.com/en-US/support/pages/all-notifications.aspxVendor Advisory

Published

Sep 8, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-0246Directory traversal vulnerability in an unspecified ActiveX …
• CVE-2012-0247ImageMagick 6.7.5-7 and earlier allows remote attackers to c…8.8
• CVE-2012-0248ImageMagick 6.7.5-7 and earlier allows remote attackers to c…5.5
• CVE-2012-0249Buffer overflow in the ospf_ls_upd_list_lsa function in ospf…
• CVE-2012-0250Buffer overflow in the OSPFv2 implementation in ospfd in Qua…
• CVE-2012-0253Multiple cross-site scripting (XSS) vulnerabilities in Deman…
• CVE-2012-0255The BGP implementation in bgpd in Quagga before 0.99.20.1 do…
• CVE-2012-0256Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x…
• CVE-2012-0257Heap-based buffer overflow in the WWCabFile ActiveX componen…
• CVE-2012-0258Heap-based buffer overflow in the WWCabFile ActiveX componen…
• CVE-2012-0259The GetEXIFProperty function in magick/property.c in ImageMa…6.5
• CVE-2012-0260The JPEGWarningHandler function in coders/jpeg.c in ImageMag…6.5