CVE-2014-4647: Stack-based buffer overflow in the loadExtensionFactory method in the TSVisualization ActiveX control in Em...

Security readout for executives and security teams

CVE-2014-4647 is a memory corruption flaw in the TSVisualization ActiveX control associated with Embarcadero ER/Studio Data Architect. The public CVE says a remote attacker could execute arbitrary code, but the bundle does not identify affected versions, CVSS severity, or a confirmed fix. Exposure is most likely on legacy Windows endpoints with Embarcadero ER/Studio Data Architect or the TSVisualization ActiveX control installed, especially where ActiveX content can be invoked. Exact vulnerable versions are not provided in the bundle. Prioritize discovery and containment over emergency response unless your environment uses this legacy component. Remote code execution through ActiveX can be serious, but the public bundle lacks version, patch, and exploitation evidence. Mitigation focus: Check Embarcadero and ZDI guidance for affected versions and fixed releases.; Inventory endpoints for ER/Studio Data Architect and TSVisualization ActiveX presence.; Remove or disable the ActiveX control where it is not operationally required..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.