← Vulnerability feed

Vulnerability record · CVE-2011-4042 · published 3 April 2012

CVE-2011-4042: Arcinfo frontvue vulnerability

Arcinfo · Frontvue

An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer.

9.3 CVSS 2.0 High EPSS 6.4% · top 6.5%
9.3CVSS 2.0 base score
6.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
6References
9 Jul 2026Last modified by NVD

Description

An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257 Vendor Advisory
http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf US Government Resource
https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440 Broken Link
http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257 Vendor Advisory
http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf US Government Resource
https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440 Broken Link

Track CVE-2011-4042 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-26867Arcinfo pcvue deserialization of untrusted data vulnerabilityARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely e…EPSS 3.8%9.3CVE-2011-4043Arcinfo frontvue vulnerabilityInteger overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote at…EPSS 7.4%8.4CVE-2026-14868Arcinfo pcvue inadequate encryption strength vulnerabilityThe encryption algorithm used to protect the configuration of user accounts, stored in the built-in user directory of PcVue projects, all versions pr…EPSS 0.06%7.5CVE-2020-26868Arcinfo pcvue exposure of resource to wrong sphere vulnerabilityARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized user to modify info…EPSS 2.2%7.5CVE-2020-26869Arcinfo pcvue information exposure vulnerabilityARC Informatique PcVue prior to version 12.0.17 is vulnerable to information exposure, allowing unauthorized users to access session data of legitima…EPSS 1.7%6.8CVE-2026-14867Arcinfo pcvue vulnerabilityCredentials of built-in users are insecurely stored in the User directory of PcVue projects, all versions prior to 17.0.0. A local attacker could ret…EPSS 0.13%6.5CVE-2022-4311Arcinfo pcvue sensitive information in log file vulnerabilityAn insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2. This could allow a user with access to …EPSS 0.34%5.8CVE-2011-4044Arcinfo frontvue vulnerabilityAn unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify fi…EPSS 27%

Source: NIST National Vulnerability Database (record CVE-2011-4042), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.