Detections
Analytics
CA BrightStor ARCserve Backup ListCtrl ActiveX (ListCtrl.ocx) AddColumn() Method Overflow
high Nessus Plugin ID 31731
Synopsis
The remote Windows host has an ActiveX control that is affected by a buffer overflow vulnerability.Description
The version of the ListCtrl ActiveX control included with various CA products and installed on the remote host contains a buffer overflow that can be triggered by a long argument to the 'AddColumn' method.If an attacker can trick a user on the affected host into visiting a specially- crafted web page, this method could be leveraged to execute arbitrary code on the affected system subject to the user's privileges.
Solution
Apply the appropriate patch as described in the vendor advisory referenced above.See Also
Plugin Details
Severity: High
ID: 31731
File Name: dsm_listctrl_activex_overflow.nasl
Version: 1.26
Type: local
Agent: windows
Family: Windows
Published: 4/3/2008
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 8.1
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
Required KB Items: SMB/Registry/Enumerated
Exploit Available: true
Exploit Ease: Exploits are available
Exploitable With
CANVAS (D2ExploitPack)
Core Impact
Metasploit (CA BrightStor ARCserve Backup AddColumn() ActiveX Buffer Overflow)
Reference Information
CVE: CVE-2008-1472
BID: 28268