Lucene search

K
nvd[email protected]NVD:CVE-2008-1472
HistoryMar 24, 2008 - 10:44 p.m.

CVE-2008-1472

2008-03-2422:44:00
CWE-119
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.926 High

EPSS

Percentile

99.0%

Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method.

Affected configurations

NVD
Node
computer_associatesbrightstor_arcserve_backup_laptops_desktopsMatch11.5
OR
computer_associatesdesktop_management_suiteMatchr11.1a
OR
computer_associatesdesktop_management_suiteMatchr11.1c1
OR
computer_associatesdesktop_management_suiteMatchr11.1ga
OR
computer_associatesdesktop_management_suiteMatchr11.2
OR
computer_associatesunicenter_dsm_r11_list_control_atxMatch11.2.3.1895
OR
unicenterasset_managementMatchr11.1a
OR
unicenterasset_managementMatchr11.1c1
OR
unicenterasset_managementMatchr11.1ga
OR
unicenterasset_managementMatchr11.2
OR
unicenterasset_managementMatchr11.2a
OR
unicenterasset_managementMatchr11.2c1
OR
unicenterdesktop_management_bundleMatchr11.1a
OR
unicenterdesktop_management_bundleMatchr11.1c1
OR
unicenterdesktop_management_bundleMatchr11.1ga
OR
unicenterdesktop_management_bundleMatchr11.2
OR
unicenterdesktop_management_bundleMatchr11.2a
OR
unicenterdesktop_management_bundleMatchr11.2c1
OR
unicenterremote_controlMatchr11.1a
OR
unicenterremote_controlMatchr11.1c1
OR
unicenterremote_controlMatchr11.1ga
OR
unicenterremote_controlMatchr11.2
OR
unicenterremote_controlMatchr11.2a
OR
unicenterremote_controlMatchr11.2c1
OR
unicentersoftware_deliveryMatchr11.1a
OR
unicentersoftware_deliveryMatchr11.1c1
OR
unicentersoftware_deliveryMatchr11.1ga
OR
unicentersoftware_deliveryMatchr11.2
OR
unicentersoftware_deliveryMatchr11.2a
OR
unicentersoftware_deliveryMatchr11.2c1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.926 High

EPSS

Percentile

99.0%