critical9.3Public exploit code
CVE-2008-5073
Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code via a long argumen…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Novell ZENworks Desktop Management 6.5 - ActiveX Control 'CanUninstall()' Remote Buffer Overflow2008-09-27 · remote · windows · Verified
Impact
Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code via a long argument to the CanUninstall method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Novell | Zenworks Desktop Management | Version 6.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/4595
- http://www.securityfocus.com/archive/1/496786/100/0/threaded
- http://www.securityfocus.com/bid/31435
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45462
- http://securityreason.com/securityalert/4595
- http://www.securityfocus.com/archive/1/496786/100/0/threaded
- http://www.securityfocus.com/bid/31435
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45462