CVE-2008-0956
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.325 Low
EPSS
Percentile
97.1%
Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager (LDM) before 2.56, allow remote attackers to execute arbitrary code via unspecified vectors.
Affected configurations
References
backweb.com/news_events/press_releases/051608.php
marc.info/?l=bugtraq&m=121380194923597&w=2
secunia.com/advisories/30598
secunia.com/advisories/30625
www.kb.cert.org/vuls/id/216153
www.securityfocus.com/bid/29558
www.us-cert.gov/cas/techalerts/TA08-162B.html
www.vupen.com/english/advisories/2008/1791
www.vupen.com/english/advisories/2008/1792
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-032
exchange.xforce.ibmcloud.com/vulnerabilities/42991
Related
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.325 Low
EPSS
Percentile
97.1%