CVE-2008-1472
Critical
Description
Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method.
SeverityCritical
CVSS9.3
Exploit probability99. percentile40.3%
ProductComputer Associates Brightstor Arcserve Backup Laptops Desktops
PublishedMar 24, 2008
First seenMar 24, 2008
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| computer_associates brightstor_arcserve_backup_laptops_desktops | 11.5 | — |
| computer_associates desktop_management_suite | r11.1, r11.2 | — |
| computer_associates unicenter_dsm_r11_list_control_atx | 11.2.3.1895 | — |
| unicenter asset_management | r11.1, r11.2 | — |
| unicenter desktop_management_bundle | r11.1, r11.2 | — |
| unicenter remote_control | r11.1, r11.2 | — |
| unicenter software_delivery | r11.1, r11.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.