CVE-2013-1079

2022-10-0316:14:49

mitre

www.cve.org

installshield

activex control

directory traversal

7.1 High

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.8%

JSON

Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.3 through 11.2 allows remote attackers to execute arbitrary local DLL files via a crafted web page that also calls the Initialize method.