Lucene search

K
kasperskyKaspersky LabKLA10358
HistoryJan 08, 2009 - 12:00 a.m.

KLA10358 ACE vulnerability in multiple products

2009-01-0800:00:00
Kaspersky Lab
threats.kaspersky.com
18

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.816 High

EPSS

Percentile

98.3%

Detect date:

01/08/2009

Severity:

Critical

Description:

Buffer overflows were found in multiple products. By exploiting these vulnerabilities malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed tabs.

Affected products:

ComponentOne Studio version for ActiveX 2008
TSC2 Help Desk version 4.1.8
SAP GUI versions 6.40 Patch 29 and 7.10

Solution:

Update to latest version

Impacts:

ACE

Related products:

TSC2 Help Desk

CVE-IDS:

CVE-2008-48279.3Critical

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.816 High

EPSS

Percentile

98.3%