What’s Vulnerable › Vulnerabilities

CVE-2011-4037

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-12-22 · updated 2026-06-16
• Weakness: CWE-119

Description

Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote attackers to execute arbitrary code via invalid data in unspecified fields of a project file.

Affected products

• Sielcosistemi Winlog Lite: through 2.07.08; 2.06.00, 2.06.03, 2.06.04, 2.06.06, 2.06.09, 2.06.10 (+16)
• Sielcosistemi Winlog Pro: through 2.07.08; 2.06.00, 2.06.03, 2.06.04, 2.06.06, 2.06.09, 2.06.10 (+16)

References

• http://secunia.com/advisories/47078
• http://securitytracker.com/id?1026388
• http://www.us-cert.gov/control_systems/pdf/ICSA-11-298-01.pdf
• http://secunia.com/advisories/47078
• http://securitytracker.com/id?1026388
• http://www.us-cert.gov/control_systems/pdf/ICSA-11-298-01.pdf

Get alerted when CVE-2011-4037 or the next vulnerability affects your stack