CVE-2008-1472

Published: Mar 24, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method.

Affected (30)

Products: Computer Associates: Brightstor Arcserve Backup Laptops Desktops, Desktop Management Suite, Unicenter Dsm R11 List Control Atx · Unicenter: Asset Management, Desktop Management Bundle, Remote Control, Software Delivery

Computer Associates

3 products

Brightstor Arcserve Backup Laptops Desktops

Desktop Management Suite

Unicenter Dsm R11 List Control Atx

Unicenter

4 products

Asset Management

Desktop Management Bundle

Remote Control

Software Delivery

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Computer Associates Brightstor Arcserve Backup Laptops Desktops	Version 11.5
Computer Associates Desktop Management Suite	Version r11.1 a
Computer Associates Desktop Management Suite	Version r11.1 c1
Computer Associates Desktop Management Suite	Version r11.1 ga
Computer Associates Desktop Management Suite	Version r11.2
Computer Associates Unicenter Dsm R11 List Control Atx	Version 11.2.3.1895
Unicenter Asset Management	Version r11.1 a
Unicenter Asset Management	Version r11.1 c1
Unicenter Asset Management	Version r11.1 ga
Unicenter Asset Management	Version r11.2
Unicenter Asset Management	Version r11.2 a
Unicenter Asset Management	Version r11.2 c1
Unicenter Desktop Management Bundle	Version r11.1 a
Unicenter Desktop Management Bundle	Version r11.1 c1
Unicenter Desktop Management Bundle	Version r11.1 ga
Unicenter Desktop Management Bundle	Version r11.2
Unicenter Desktop Management Bundle	Version r11.2 a
Unicenter Desktop Management Bundle	Version r11.2 c1
Unicenter Remote Control	Version r11.1 a
Unicenter Remote Control	Version r11.1 c1
Unicenter Remote Control	Version r11.1 ga
Unicenter Remote Control	Version r11.2
Unicenter Remote Control	Version r11.2 a
Unicenter Remote Control	Version r11.2 c1
Unicenter Software Delivery	Version r11.1 a
Unicenter Software Delivery	Version r11.1 c1
Unicenter Software Delivery	Version r11.1 ga
Unicenter Software Delivery	Version r11.2
Unicenter Software Delivery	Version r11.2 a
Unicenter Software Delivery	Version r11.2 c1