CVE-2008-1472

Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method.

Link	Resource
http://www.securityfocus.com/bid/28268	Exploit
http://secunia.com/advisories/29408	Vendor Advisory
http://community.ca.com/blogs/casecurityresponseblog/archive/2008/3/28.aspx
http://www.securitytracker.com/id?1019617
http://www.vupen.com/english/advisories/2008/0902/references	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41225
https://www.exploit-db.com/exploits/5264
http://www.securityfocus.com/archive/1/490263/100/0/threaded
http://www.securityfocus.com/archive/1/489893/100/0/threaded

Configuration 1

cpe:2.3:a:unicenter:remote_control:r11.2:*:*:*:*:*:*:* cpe:2.3:a:unicenter:desktop_management_bundle:r11.2:c1:*:*:*:*:*:* cpe:2.3:a:unicenter:desktop_management_bundle:r11.1:c1:*:*:*:*:*:* cpe:2.3:a:unicenter:desktop_management_bundle:r11.2:*:*:*:*:*:*:* cpe:2.3:a:unicenter:desktop_management_bundle:r11.1:a:*:*:*:*:*:* cpe:2.3:a:unicenter:asset_management:r11.2:a:*:*:*:*:*:* cpe:2.3:a:unicenter:remote_control:r11.2:c1:*:*:*:*:*:* cpe:2.3:a:unicenter:software_delivery:r11.2:c1:*:*:*:*:*:* cpe:2.3:a:unicenter:software_delivery:r11.2:a:*:*:*:*:*:* cpe:2.3:a:unicenter:software_delivery:r11.1:c1:*:*:*:*:*:* cpe:2.3:a:unicenter:desktop_management_bundle:r11.1:ga:*:*:*:*:*:* cpe:2.3:a:computer_associates:unicenter_dsm_r11_list_control_atx:11.2.3.1895:*:*:*:*:*:*:* cpe:2.3:a:computer_associates:desktop_management_suite:r11.1:ga:*:*:*:*:*:* cpe:2.3:a:unicenter:remote_control:r11.1:c1:*:*:*:*:*:* cpe:2.3:a:unicenter:asset_management:r11.2:c1:*:*:*:*:*:* cpe:2.3:a:unicenter:asset_management:r11.2:*:*:*:*:*:*:* cpe:2.3:a:unicenter:remote_control:r11.1:a:*:*:*:*:*:* cpe:2.3:a:computer_associates:brightstor_arcserve_backup_laptops_desktops:11.5:*:*:*:*:*:*:* cpe:2.3:a:computer_associates:desktop_management_suite:r11.1:c1:*:*:*:*:*:* cpe:2.3:a:unicenter:remote_control:r11.1:ga:*:*:*:*:*:* cpe:2.3:a:unicenter:software_delivery:r11.2:*:*:*:*:*:*:* cpe:2.3:a:unicenter:software_delivery:r11.1:ga:*:*:*:*:*:* cpe:2.3:a:unicenter:asset_management:r11.1:a:*:*:*:*:*:* cpe:2.3:a:unicenter:asset_management:r11.1:c1:*:*:*:*:*:* cpe:2.3:a:unicenter:software_delivery:r11.1:a:*:*:*:*:*:* cpe:2.3:a:unicenter:asset_management:r11.1:ga:*:*:*:*:*:* cpe:2.3:a:unicenter:remote_control:r11.2:a:*:*:*:*:*:* cpe:2.3:a:unicenter:desktop_management_bundle:r11.2:a:*:*:*:*:*:* cpe:2.3:a:computer_associates:desktop_management_suite:r11.1:a:*:*:*:*:*:* cpe:2.3:a:computer_associates:desktop_management_suite:r11.2:*:*:*:*:*:*:*

---

Published : 2008-03-24 10:44

Updated : 2018-10-11 08:34

---

NVD link : CVE-2008-1472

Mitre link : CVE-2008-1472

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer