{"id":"CVE-2011-4034","aliases":["EUVD-2011-3986","GHSA-fqp8-j3rg-x5gf"],"status":"published","title":"Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo...","description":"Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.13368,"percentile":0.96443,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2011-12-02T11:00:00Z","modified":"2026-06-16T23:34:19Z","exploits":[{"source":"metasploit","id":"exploit/windows/browser/teechart_pro","title":"TeeChart Professional ActiveX Control Trusted Integer Dereference","type":"exploit","platform":"Windows","date":"2011-08-11","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/browser/teechart_pro"}],"products":[{"vendor":"schneider-electric","product":"citecthistorian"},{"vendor":"schneider-electric","product":"citectscada_reports"},{"vendor":"schneider-electric","product":"vijeo_historian"}],"references":[{"url":"http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf","tags":["x_refsource_MISC","x_transferred","Patch","US Government Resource"]},{"url":"http://www.citect.com/index.php?option=com_content\u0026view=article\u0026id=1656\u0026Itemid=1695","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4034"},{"url":"https://github.com/advisories/GHSA-fqp8-j3rg-x5gf"}],"sources":{"cve":[{"id":"CVE-2011-4034","description":"Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.","status":"published","published":"2011-12-02T11:00:00Z","modified":"2024-09-16T23:16:13.957Z","updated_at":"2026-11-02T14:35:37.989579Z"}],"euvd":[{"id":"EUVD-2011-3986","description":"Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.","status":"published","published":"2011-12-02T11:00:00Z","modified":"2024-09-16T23:16:13Z","updated_at":"2026-11-03T00:54:55.200068Z"}],"ghsa":[{"id":"GHSA-fqp8-j3rg-x5gf","title":"Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo...","description":"Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.","status":"published","published":"2022-05-17T05:32:00Z","modified":"2023-01-28T05:03:58Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:44:04.962891Z"}],"nvd":[{"id":"CVE-2011-4034","description":"Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.","status":"published","published":"2011-12-02T11:55:05.277Z","modified":"2026-06-16T23:34:19.287Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:11.800512Z"}]}}