CVE-2011-1719: Broadcom Output Management Web Viewer

High severity, CVSS 9.3. EPSS: 12% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via (1) a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or (2) a long Title property value to the UOMWV_Helper ActiveX control in UOMWV_HelperActiveX.ocx before 11.5.0.1.

Affected products

• Broadcom Output Management Web Viewer: version 11.0 only; version 11.5 only

Published 2011-04-27. Last modified 2026-06-16.