NetSight
IP …
critical9.3Public exploit code

CVE-2008-1472

Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method.

Affected products

VendorProductAffected versions
Computer AssociatesBrightstor Arcserve Backup Laptops Desktops
Version 11.5
Computer AssociatesDesktop Management Suite
Versions r11.1, r11.2
Computer AssociatesUnicenter Dsm R11 List Control Atx
Version 11.2.3.1895
UnicenterAsset Management
Versions r11.1, r11.2
UnicenterDesktop Management Bundle
Versions r11.1, r11.2
UnicenterRemote Control
Versions r11.1, r11.2
UnicenterSoftware Delivery
Versions r11.1, r11.2

Weakness classification

CWE-119

References