Trend Micro Security

CA BrightStor ARCserve Backup r11.5 ActiveX Remote BOF Exploit 0day

2015年7月21日
  危険度: : 緊急
  CVE識別番号: CVE-2008-1472

  概要

Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method.

  トレンドマイクロの対策

Apply associated Trend Micro DPI Rules.

  対応方法

  Trend Micro Deep Security DPI Rule Number: 1002061
  Trend Micro Deep Security DPI Rule Name: 1002061 - Identified Suspicious JavaScript Encoded Shellcode

  影響を受けるソフトウェア

  • Computer Associates BrightStor ARCserve Backup Laptops_Desktops 11.5
  • Computer Associates Unicenter DSM r11 List Control ATX 11.2.3.1895
  • computer_associates brightstor_arcserve_backup_laptops_desktops 11.5
  • computer_associates desktop_management_suite r11.1
  • computer_associates desktop_management_suite r11.2
  • computer_associates unicenter_dsm_r11_list_control_atx 11.2.3.1895
  • unicenter asset_management r11.1
  • unicenter asset_management r11.2
  • unicenter desktop_management_bundle r11.1
  • unicenter desktop_management_bundle r11.2
  • unicenter remote_control r11.1
  • unicenter remote_control r11.2
  • unicenter software_delivery r11.1
  • unicenter software_delivery r11.2