CVE-2011-2217: Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Fa...

Security readout for executives and security teams

This is an old client-side remote code execution flaw affecting VMware Infrastructure Client versions that included vulnerable Tom Sawyer ActiveX controls. A user browsing crafted HTML in Internet Explorer could trigger memory corruption, potentially allowing code execution or a crash on that workstation. Exposure is likely limited to legacy Windows administration workstations with vulnerable VMware Infrastructure Client 3 components installed and usable through Internet Explorer ActiveX. Organizations no longer running VI Client 2.0.2 or 2.5 are unlikely to be affected based on the provided sources. Prioritize if legacy VMware Infrastructure 3 administration workstations remain in use. The business risk is workstation compromise through browser-delivered content, with possible access to virtualization administration context. If the legacy client is absent, urgency is low. Mitigation focus: Upgrade VI Client 2.0.2 to Build 230598 or later.; Upgrade VI Client 2.5 to Build 204931 or later.; Remove obsolete VI Client installations where VMware Infrastructure 3 is retired..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.