National Instruments LabWindows/CVI Help subsystem Vulnerability

Release date:
Updated on: 2013-08-20

Affected Systems:
National Instruments LabWindows
National Instruments CVI
Description:
--------------------------------------------------------------------------------
Bugtraq id: 61832
CVE (CAN) ID: CVE-2013-5025

National Instruments is an American company engaged in the development of engineering software related to testing, control, and design, including virtual Instruments and electronic testing equipment. Well-known products include visual development environment LabVIEW, C language Virtual Instrument Application System LabWindows/CVI, integrated circuit analysis program NI Multisim, etc; hardware Products include VXI bus, PXI bus, VME bus frame and module, IEEE-488 interface and internal integration circuit and other automation technology standards.

ActiveX controls of the Help sub-system in versions earlier than National Instruments LabWindows/CVI 2013 have a remote security vulnerability. The impact is unknown.

<* Source: vendor
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

National Instruments
--------------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.ni.com/support/zhs/
Http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623? OpenDocument