http://www.zerodayinitiative.com/advisories/ZDI-11-203/ CVE-2011-2112 http://www.zerodayinitiative.com/advisories/ZDI-11-204/ CVE-2011-2112 These seem like distinct vulnerabilities; DIRAPI.dll vs TextXtra.x32 Module, have separate IPS signatures, etc. Can you verify the CVEs please? Thanks! Brian OSVDB.org