← Vulnerability feed

Vulnerability record · CVE-2011-0323 · published 7 February 2011

CVE-2011-0323: Topazsystems sigplus pro activex control vulnerability

Topazsystems · Sigplus Pro Activex Control

Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to execute arbitrary code by calling the exposed unsafe (1) SetLogFilePath and (2) SigMessage methods to create arbitrary files with arbitrary content.

9.3 CVSS 2.0 High EPSS 4.8% · top 8.4%
9.3CVSS 2.0 base score
4.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to execute arbitrary code by calling the exposed unsafe (1) SetLogFilePath and (2) SigMessage methods to create arbitrary files with arbitrary content.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/42800 Vendor Advisory
http://secunia.com/secunia_research/2011-1/ Vendor Advisory
http://www.securityfocus.com/bid/46128
https://exchange.xforce.ibmcloud.com/vulnerabilities/65117
http://secunia.com/advisories/42800 Vendor Advisory
http://secunia.com/secunia_research/2011-1/ Vendor Advisory
http://www.securityfocus.com/bid/46128
https://exchange.xforce.ibmcloud.com/vulnerabilities/65117

Track CVE-2011-0323 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2011-0324Topazsystems sigplus pro activex control memory buffer overflow vulnerabilityMultiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allow remote attacke…EPSS 5.5%9.3CVE-2010-2931Topazsystems sigplus pro activex control memory buffer overflow vulnerabilityStack-based buffer overflow in SigPlus Pro 3.74 ActiveX control allows remote attackers to execute arbitrary code via a long eighth argument (HexStri…EPSS 9.4%

Source: NIST National Vulnerability Database (record CVE-2011-0323), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.