CVE-2011-2397

The CVE-2011-2397 affects Iron Mountain Connected Backup Agent service. A crafted opcode 13 request can trigger LaunchCompoundFileAnalyzer to send data to System.getRunTime.exec, enabling remote arbitrary code execution on the affected Windows endpoint. Public sources (SAINT/SAINT-derived advisor...