https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2011-3503.htmlhttps://patchthecve.com/cve/CVE-2011-3503.htmlTue, 16 Jun 2026 23:33:22 +0000HIGH 9.3: Untrusted search path vulnerability in eSignal 10.6.2425.1208, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse JRS_UT.dll that is located in the same folder as a .quo (QUOTE) file. NOTE: thttps://patchthecve.com/cve/CVE-2011-3494.htmlhttps://patchthecve.com/cve/CVE-2011-3494.htmlTue, 16 Jun 2026 23:33:21 +0000HIGH 10.0: WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long StyleTemplate element in a QUO, SUM or POR file, which triggers a stack-based buffer overflow, or (2) a long Font->FaceName field (aka FaceName https://patchthecve.com/cve/CVE-2004-1868.htmlhttps://patchthecve.com/cve/CVE-2004-1868.htmlTue, 16 Jun 2026 22:08:33 +0000HIGH 7.5: Stack-based buffer overflow in WinSig.exe in eSignal 7.5 and 7.6 allows remote attackers to execute arbitrary code via a long STREAMQUOTE tag.