CVE-2011-3174 in ZENworks Configuration Management
Summary
Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary code via a long bstrReplaceText parameter.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
08/19/2011
Disclosure
07/26/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 61439 | Novell ZENworks Configuration Management ActiveX Control ISGrid2.dll DoFindReplace memory corruption | 119 | Not defined | Not defined | CVE-2011-3174 |