CVE-2011-3142: Wellintech Kingview

High severity, CVSS 10.0. EPSS: 38.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote attackers to execute arbitrary code via a long second argument to the ValidateUser method.

Affected products

• Wellintech Kingview: version 6.52 only; version 6.53 only

Published 2011-08-16. Last modified 2026-06-16.