CVE Database
/

CVE-2011-2217

Back to search

CVE-2011-2217

Published: Jun 6, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build 230598 and 2.5 before Build 204931 in VMware Infrastructure 3, do not properly handle attempted initialization within Internet Explorer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HTML document.

VendorProductVersions

n/a

n/a

affected
n/a

References

vmware-viclient-code-exec(67816)
vdb-entry
x_refsource_XF
44844
third-party-advisory
x_refsource_SECUNIA
48099
vdb-entry
x_refsource_BID
44826
third-party-advisory
x_refsource_SECUNIA
1025602
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now