exploitDog

CVE-2011-1719

Опубликовано: 27 апр. 2011

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via (1) a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or (2) a long Title property value to the UOMWV_Helper ActiveX control in UOMWV_HelperActiveX.ocx before 11.5.0.1.

Комментарий

Vendor Advisory: https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID={DED5B724-B500-46DA-A855-B2AF457B5364}

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:broadcom:output_management_web_viewer:11.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:output_management_web_viewer:11.5:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.20402

Средний

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-2vrp-wfmj-qg4p

github

больше 3 лет назад

Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via (1) a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or (2) a long Title property value to the UOMWV_Helper ActiveX control in UOMWV_HelperActiveX.ocx before 11.5.0.1.

EPSS

Процентиль: 95%

0.20402

Средний

9.3 Critical

CVSS2

Дефекты

CWE-119