---
id: CVE-2011-4042
title: >-
  An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0
  through 10.0, FrontVue, and PlantVue allows remote attackers to execute
  arbitrary code by using a crafted HTML document to obtain control of a
  function pointer.
summary: >-
  An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0
  through 10.0, FrontVue, and PlantVue allows remote attackers to execute
  arbitrary code by using a crafted HTML document to obtain control of a
  function pointer.
severity: critical
cvss: 9.3
cvssVector: 'AV:N/AC:M/Au:N/C:C/I:C/A:C'
vendor: arcinformatique
product: frontvue
affected:
  - frontvue
  - 'pcvue >= 6.0, <= 10.0'
  - plantvue
published: '2012-04-03'
updated: '2026-07-09'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2011-4042'
references:
  - url: >-
      http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257
    label: cret@cert.org
  - url: 'http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf'
    label: cret@cert.org
  - url: >-
      https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440
    label: cret@cert.org
  - url: >-
      http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - exploit-available
epss: 0.06428
epssPercentile: 0.93475
exploitAvailable: true
ingestedAt: '2026-07-09T16:51:20.627Z'
exploits:
  exploitdb: true
  checkedAt: '2026-09-21T15:23:32.324Z'
---

## Overview

An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer.

## Affected

- `frontvue`
- `pcvue >= 6.0, <= 10.0`
- `plantvue`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.