Unscored severity · published Mar 24, 2008
CVE-2008-1472
Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite…
–
CVSS
40.3%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method.
Exploitation
Is it being used?
Exploit prediction (EPSS)40.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AM
Asset Management · Unicenter
r11.1; r11.1; r11.1; r11.2; r11.2; r11.2 · source: NVD
BA
Brightstor Arcserve Backup Laptops Desktops · Computer Associates
11.5 · source: NVD
DM
Desktop Management Bundle · Unicenter
r11.1; r11.1; r11.1; r11.2; r11.2; r11.2 · source: NVD
DM
Desktop Management Suite · Computer Associates
r11.1; r11.1; r11.1; r11.2 · source: NVD
RC
Remote Control · Unicenter
r11.1; r11.1; r11.1; r11.2; r11.2; r11.2 · source: NVD
SD
Software Delivery · Unicenter
r11.1; r11.1; r11.1; r11.2; r11.2; r11.2 · source: NVD
UD
Unicenter Dsm R11 List Control Atx · Computer Associates
11.2.3.1895 · source: NVD
Affected product
BA
Brightstor Arcserve Backup Laptops Desktops
Computer Associates
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1472
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1472
community.ca.com
http://community.ca.com/blogs/casecurityresponseblog/archive/2008/3/28.aspx
Vendor Advisory
http://secunia.com/advisories/29408
www.securityfocus.com
http://www.securityfocus.com/archive/1/489893/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/490263/100/0/threaded
Exploit
http://www.securityfocus.com/bid/28268
www.securitytracker.com
http://www.securitytracker.com/id?1019617