CVE:CVE-2011-2089
CNNVD:CNNVD-201105-169
ICONICS BizViz 9.22之前的9.x版本和GENESIS32 9.22之前的9.x版本的WebHMI子系统的VersionInfo ActiveX控件中存在基于栈的缓冲区溢出漏洞。该漏洞是由于“SetActiveXGUID()”方法（GenVersion.dll）中存在的边界错误导致的，远程攻击者可以借助在“Ax_GUID”参数中传递的超长字符串执行任意代码。
solution:Upgrade iconics bizviz to a higher version than 9.0,9.01,9.1,9.2,9.13,9.20,9.21,and avoid the version 9.0,9.01,9.1,9.2,9.13,9.20,9.21; Upgrade iconics genesis32 to a higher version than 9.0,9.1,9.01,9.2,9.13,9.20,9.21,and avoid the version 9.0,9.1,9.01,9.2,9.13,9.20,9.21