Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-1472

Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method.

Published

2008-03-24T22:44:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application computer_associates brightstor_arcserve_backup_laptops_desktops 11.5 Yes
Application computer_associates desktop_management_suite r11.1 Yes
Application computer_associates desktop_management_suite r11.1 Yes
Application computer_associates desktop_management_suite r11.1 Yes
Application computer_associates desktop_management_suite r11.2 Yes
Application computer_associates unicenter_dsm_r11_list_control_atx 11.2.3.1895 Yes
Application unicenter asset_management r11.1 Yes
Application unicenter asset_management r11.1 Yes
Application unicenter asset_management r11.1 Yes
Application unicenter asset_management r11.2 Yes
Application unicenter asset_management r11.2 Yes
Application unicenter asset_management r11.2 Yes
Application unicenter desktop_management_bundle r11.1 Yes
Application unicenter desktop_management_bundle r11.1 Yes
Application unicenter desktop_management_bundle r11.1 Yes
Application unicenter desktop_management_bundle r11.2 Yes
Application unicenter desktop_management_bundle r11.2 Yes
Application unicenter desktop_management_bundle r11.2 Yes
Application unicenter remote_control r11.1 Yes
Application unicenter remote_control r11.1 Yes
Application unicenter remote_control r11.1 Yes
Application unicenter remote_control r11.2 Yes
Application unicenter remote_control r11.2 Yes
Application unicenter remote_control r11.2 Yes
Application unicenter software_delivery r11.1 Yes
Application unicenter software_delivery r11.1 Yes
Application unicenter software_delivery r11.1 Yes
Application unicenter software_delivery r11.2 Yes
Application unicenter software_delivery r11.2 Yes
Application unicenter software_delivery r11.2 Yes
References