CVE-2011-3174 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Zenworks Configuration Management

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
6.8MEDIUMNVD
EPSS
20.3%
top 4.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Novell Zenworks Configuration Management
Timeline
PublishedJul 26
Latest updateMay 17

Description

Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary code via a long bstrReplaceText parameter.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: www.novell.com ↗Patch: www.zerodayinitiative.com ↗Patch: www.novell.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-2f8r-hw2f-68f2: Buffer overflow in the DoFindReplace function in the ISGrid↗2022-05-17
▶
CVEList
CVE-2011-3174: Buffer overflow in the DoFindReplace function in the ISGrid↗2012-07-26
▶
CVE-2011-3174 — MEDIUM severity | cvebase